blacklist unattended-upgrades package

HulaHoop · March 14, 2017, 12:58am

@Patrick please add the package “unattended-upgrades” to banned packages so that it warns people against automatic upgrades. I couldn’t find where this is supposed to go.

Patrick · March 14, 2017, 10:15am

github.com

Whonix/whonixcheck/blob/master/etc/whonix.d/30_whonixcheck_default.conf#L70


whonixcheck_unwanted_package+=" bts " ## privacy issues
whonixcheck_unwanted_package+=" wnpp-check " ## privacy issues
whonixcheck_unwanted_package+=" python-pip " ## privacy issues
whonixcheck_unwanted_package+=" gnome-calculator " ## privacy issues
whonixcheck_unwanted_package+=" chrony " ## interferes with Whonix network time synchronization
whonixcheck_unwanted_package+=" ntp " ## interferes with Whonix network time synchronization
whonixcheck_unwanted_package+=" ntpdate " ## interferes with Whonix network time synchronization
whonixcheck_unwanted_package+=" unattended-upgrades " ## auto-updating when apt has bugs is a security risk
## hardening, opens local listener, can be accidentally installed as dependency
## https://forums.whonix.org/t/kdeconnectd-removal
whonixcheck_unwanted_package+=" kdeconnect "


## To remove selected packages from the list of unwanted packages,
## you could add something like  the following to your
## "/etc/whonix.d/50_whonixcheck_user.conf". (Replace the below example that is
## using 'popularity-contest' with the actual name of the package you want
## to remove from the list.
#whonixcheck_unwanted_package="$(echo "$whonixcheck_unwanted_package" | sed 's/ popularity-contest //g')"


## packages ignored by the check nonfree packages test.