Disk & USB Automount in Kicksecure

Support
21

For anyone who reads this and has the issue I had, I will summarize what I think fixed it.

Enable thunar-volman

In terminal: sudo nano /etc/skel/.config/xfce4/xfconf/xfce-perchannel-xml/thunar.xml

Line 15 <property name"misc-volume-management" type=“bool” value=“false”/>

Change from false to true

If still doesnt work try other things in the thread or:

22

Now we need to figure out which steps are required indeed and then document this.

Editing /etc/skel does nothing for existing user user. File edits are probably not required. GUI should suffice.

23

Alright, I will update this thread with better steps after I install kicksecure on another device and get this working from a fresh install again, and I try to narrow down the steps.

But I have to get everything I need working on that device before I install on other device, in particular the shared folders with vm, will make a thread about that now.

2 Likes
24

If encrypted disk, then this might help as per cannot access encrypted USB drive with Thunar in Whonix 15 - #9 by Patrick

sudo apt install libblockdev-crypto2
1 Like
25

Can we include this in Whonix since anyone who follows best practice would be encrypting their drives?

1 Like
26

This is done in git master as per cannot access encrypted USB drive with Thunar in Whonix 15 - #9 by Patrick

1 Like
27

Do we need

?

1 Like
28

yes

1 Like
29
30

Like everything needs udev. It’s what populates /dev.

dmsetup is also likely needed by plenty of stuff.

2 Likes
31

This issue is considered fully resolved until someone reports again this being an issue.

  • We no longer enable hidepid by default.
  • We no longer change anything related to pkexec.
  • Missing packages are now installed by default.
  • User reported this being resolved.
  • Shared folder issue: if still an issue, please post in a separate thread.

(Since this was brought up here: Ledger Nano-S : No device found - #2 by HulaHoop)

1 Like
32

Due to an oversight when porting to LXQt, removable media automount was not being disabled. I’ve created and submitted the fixes for this. The rest of this post is written as if these fixes were already merged.

The current way of disabling removable media automount is in pcmanfm-qt’s configuration. Because of how pcmanfm-qt handles configuration, this can’t be enabled with a simple drop file, since:

  • pcmanfm-qt does not support drop directories for configuration, and
  • pcmanfm-qt stores a great deal of configuration details in each individual user’s home folder, thus making it so that system-wide configuration changes likely won’t take effect in existing user sessions.

Currently, system-wide pcmanfm-qt configuration in kicksecure-base-files, anon-ws-base-files, and anon-gw-base-files disable removable media automount. For existing users, some fixup code in legacy-dist is used to go through each users’ home directory, and disable removable media automount one time only. (If users choose to (re-)enable it in the future, that setting will be honored.)

1 Like
33

Will be fixed in version 18.0.9.9 (and above).

To change this setting manually before a newer version is released:

~/.config/pcmanfm-qt/default/settings.conf

Settings:

MountOnStartup=false
MountRemovable=false

Developer information: