Kicksecure Template for Qubes - Testers Wanted!

Testers wanted!

Note: This Template now includes a new security feature, user-sysmaint-split, enabled by default.

It is strongly recommended to review the feature’s documentation:

About user-sysmaint-split:
This security enhancement separates daily user activities from system maintenance tasks. The regular user account can no longer use sudo, su, or pkexec by default. Instead, administrative rights are reserved for a dedicated system maintenance account (sysmaint), reducing security risks during daily use.

Attempting to use sudo as the regular user will result in an error message:

sudo test

zsh: permission denied: sudo
zsh: exit 126 sudo test

To gain administrative (“root”) rights, users can either use a Qubes Root Console or disable user-sysmaint-split by enabling unrestricted admin mode:


This release would not have been possible without the numerous supporters of Kicksecure!


Please Donate!


Please Contribute!


(This testers wanted announcement might in future be transformed into a stable release announcement if no major issues are found during the testing period.)