Patrick Schleizer

file/folder permissions issue `d????????? ? ? ? ? ? .` | Firefox no longer starting (probably not not a Firefox issue) | caused by disallow registering interpreters for miscellaneous binary formats `sysctl fs.binfmt_misc.status=0`

1

`ls -la .mozilla` ``` ls: cannot access '.mozilla/..': Permission denied ls: cannot access '.mozilla/.': Permission denied total 0 d????????? ? ? ? ? ? . d????????? ? ? ? ?...

drop legacy support: stop supporting oldstable and older

2

https://github.com/grml/grml-debootstrap/pull/266 is one example of something difficult to implement due to old version support. That is versions older than Debian stable. Speak stable -1 (oldstable) or stable -2 (oldoldstable) or...

**Describe the bug** Some dracut modules fail to copy systemd system drop-ins. This is no surprise by looking at the source code. Quote [`modules.d/01systemd-repart/module-setup.sh`](https://github.com/dracut-ng/dracut-ng/blob/main/modules.d/01systemd-repart/module-setup.sh) ``` inst_multiple -o \ "/usr/lib/repart.d/*.conf" \...

mitigate relay attacks

6

**Is your feature request related to a problem? Please describe.** Quote https://tech.michaelaltfield.net/2023/02/16/evil-maid-heads-pureboot/ > Relay attack > > While the TOTP solution cleverly solves the replay attack, it’s still vulnerable to...

Kicksecure template

12

### The problem you're addressing (if any) A Kicksecure Qubes Template is unavailable. The only way to use Kicksecure in Qubes is [Distribution Morphing](https://www.kicksecure.com/wiki/Qubes#Distribution_Morphing). ### The solution you'd like Provide...

Kicksecure inside Debian Template sdwdate qrexec Denied message

15

Installing Kicksecure inside Debian Template (Following [distro-morphing](https://www.kicksecure.com/wiki/Debian) instructions) the Appvm which is based on kicksecure template will give tons of the same error reported above: (The Appvm called I2P) ...

qubes-app-shutdown-idle incompatible with user-sysmaint-split (and/or without qubes-core-agent-passwordless-root package)

3

### Qubes OS release R4.2 ### Brief summary `qubes-app-shutdown-idle` does not shutdown Whonix (and Kicksecure?) VMs. ### Steps to reproduce Unknown. Probably "normal" use of `qubes-app-shutdown-idle`. Was reported by user:...

add conspicuous EOL indicator widget for dom0

11

### The problem you're addressing (if any) Users fail to notice dom0 EOL (end-of-life). ([example](https://forums.whonix.org/t/whonix-gateway-broken-after-last-upgrade/21605)) Some users are not reading release announcements or are missing key information. ### The solution...

mitigate relay attacks

4

Does keylime mitigate relay attacks? From what I've read, I would not know how it could. What do you I mean by relay attack? Quote [Trusted Boot (Anti-Evil-Maid, Heads, and...

review secureblue sysctl

2

* https://github.com/secureblue/secureblue/blob/live/files/system/etc/sysctl.d/hardening.conf * https://github.com/secureblue/secureblue/blob/a6b58f042b0e9e9036a6d68a5b202eed96a1a892/files/system/etc/sysctl.d/hardening.conf