Kicksecure 17.2.0.7 - Point Release!

[Patrick]

Download

Download Kicksecure (FREE)

(What is a point release?)

---

Upgrade

Alternatively, in-place release upgrade is possible upgrade using Kicksecure repository.

---

This release would not have been possible without the numerous supporters of Kicksecure!

---

Please Donate!

Donating to Kicksecure

---

Please Contribute!

Contribute to Kicksecure

---

Major Changes

• User user with empty password by default. (passwordless) This is less confusing than the previously default password changeme.
  • updated default passwords user documentation
  • Rationale for Change from Default Password changeme to Empty Default Password
  • Forum discussion: default password (changeme) impact
• usability-misc:
  • enable autologin for lightdm. To disable, see: Disable Autologin
• anon-shared-build-apt-sources-tpo:
  • update signing key. Thereby fixed build issue: Whonix version 17.2.0.1 build from source code failure: The following signatures were invalid: EXPKEYSIG 74A941BA219EC810 deb.torproject.org archive signing key - Support - Whonix Forum
• helper-scripts:
  • append-once API change: /path/to/file ‘line to append’
• kicksecure-meta-packages:
  • fix installation of msgcollector-gui on Kicksecure host ISO
  • rename non-qubes-vm-enhancements-cli to non-qubes-enhancements-cli to make it re-usable on Kicksecure Host ISO
  • add to firmware-nonfreedom: atmel-firmware firmware-ath9k-htc firmware-intelwimax firmware-ralink
  • add catfish to kicksecure-default-applications-cli
  • add iproute2 (contains ip) and traceroute to kicksecure-recommended-cli
  • add distro-info-data to kicksecure-recommended-cli
• security-misc:
  • No longer disable Intel ME related kernel modules as this might break firmware updates. See also Intel ME Kernel Modules.
  • documentation improvements (Thanks to Raja Grewal!)
  • permission-hardener code improvements (Thanks to Ben Grande!)
    • Handle newlines in file names (Thanks to Ben Grande!)
    • Log output with defined levels (Thanks to Ben Grande!)
    • Prettify log messages (Thanks to Ben Grande!)
    • allow postfix
  • Provide explanation on the disabling of IPv6 Privacy Extensions (Thanks to Raja Grewal!)
  • Disable two network modules These were previously blacklisted for two years in Incorporated Ubuntu’s kernel module blacklists · Kicksecure/security-misc@61ef9bd · GitHub. (Thanks to Raja Grewal!)
  • Disable some Intel Platform Monitoring Technology Telemetry (PMT) modules (Thanks to Raja Grewal!)
• Linux VirtualBox Installer improvements
• derivative-maker:
  • always run dm-prepare-release (primarily to export VirtualBox .ova to ~/derivative-binary folder)
  • always auto-create local signing key if none is existing for code simplification
  • fix, no longer error out on stray loop devices until ignoring /var/swapfile loop gets implemented
  • create /etc/mailname if it does not exist this is to silence noisy pbuilder warning: W: No local /etc/mailname to copy, relying on /var/cache/pbuilder/cow.cow_amd64/cow.950654/etc/mailname to be correct

---

Full difference of all changes

https://github.com/Kicksecure/derivative-maker/compare/17.2.0.1-developers-only…17.2.0.7-developers-only