Hello. please help me figure out why such errors occur in systemcheck?
I installed this version of the calculator because I like the way it looks, why do you advise me to remove it?
ERROR: Check ‘pkexec /usr/libexec/systemcheck/pkexec-test’ result: System misconfiguration detected. No need to panic. This is not a severe issue. However, other tests may be affected due to this.
The following command:
pkexec /usr/libexec/systemcheck/pkexec-test ; echo $?
did not produce an empty output with an exit code of zero, indicating an unexpected result.
exit_code: 127
privilege_escalation_tool_output:
pkexec must be setuid root
WARNING: Whonix Unwanted Packages Test Result: 1 unwanted package(s) installed. It is recommended that you remove them from this machine.
Open a terminal. (Start Menu → System → Terminal)
Purge.
sudo apt-get purge gnome-calculator
See also: Debian Packages
If you know what you are doing, feel free to disable this check. Create a file /etc/systemcheck.d/50_user.conf and add:
systemcheck_skip_functions+=" check_unwanted_packages "
I have a second question: How can I make the standard keychain automatically unlocked when I turn on the system in whonix? the password is set - empty, but still I have to launch seahorse when I turn on the system and press the button - unlock
This was the result of a bug in Whonix 18. Try updating your system (sudo apt update && sudo apt full-upgrade, or upgrade-nonroot) to install the latest version of security-misc-shared, this should fix the issue.
I’m using Whonix version 17. All my packages are up to date. I’ve had these errors for a couple of months on version 17.
I tried to update to whonix 18, but after the update many errors appeared in systemcheck, and an error also appeared when starting the Derivative Repository. In the end, I decided to go back to the version 17 snapshot.
Hmm, I incorrectly assumed you were on version 18 already. The bug exists in version 17 too (security-misc and pkexec’s post-install scripts have a slight conflict). I don’t think we have a fix for it yet (and I don’t believe one is planned), but it should be fairly easy to fix:
Open a terminal
Run sudo nano /var/lib/permission-hardener-v2/existing_mode/statoverride
Find the line that ends with /usr/bin/pkexec, and change the number immediately preceding it from 755 to 4755
Save and quit
Run sudo permission-hardener enable
This should fix pkexec’s permissions and keep permisison-hardener from messing them up again later.
@Patrick Should we backport the fix for this to Whonix 17?
Thanks, this helped. Why is the gnome-calculator package considered deprecated?
I liked the way it looks. I would suggest removing it from the list of unwanted packages.
I have a second question: How can I make the standard keychain automatically unlocked when I turn on the system in whonix? the password is set - empty, but still I have to launch seahorse when I turn on the system and press the button - unlock