Kicksecure Template for Qubes - Initial Stable Release!

Download

Major Changes

Note: This Template now includes a new security feature, user-sysmaint-split, enabled by default.

It is strongly recommended to review the feature’s documentation:

About user-sysmaint-split:
This security enhancement separates daily user activities from system maintenance tasks. The regular user account can no longer use sudo, su, or pkexec by default. Instead, administrative rights are reserved for a dedicated system maintenance account (sysmaint), reducing security risks during daily use.

Attempting to use sudo as the regular user will result in an error message:

sudo test

zsh: permission denied: sudo
zsh: exit 126 sudo test

To gain administrative (“root”) rights, users can either use a Qubes Root Console or disable user-sysmaint-split by enabling unrestricted admin mode:


This release would not have been possible without the numerous supporters of Kicksecure!


Please Donate!


Please Contribute!


Changelog

Same as Kicksecure 17.3.9.9 - Point Release!


(This forum post was previously a call for testers. No release critical bugs where found during the testing period. This forum post was therefore transformed into a stable release announcement. See edit history.)