ParrotOS + Whonix

Hi. It’s hotwater from ParrotOS Dev Team.

I would like to work on bringing whonix to ParrotOS, I am having issues right now with installing security-misc package from whonix repository:

Preparing to unpack .../security-misc_3%3a16.8-1_all.deb ...
addgroup: The group `sysfs' already exists as a system group. Exiting.
addgroup: The group `cpuinfo' already exists as a system group. Exiting.
The user `root' is already a member of `sudo'.
addgroup: The group `console' already exists as a system group. Exiting.
addgroup: The group `console-unrestricted' already exists as a system group. E
xiting.
The user `root' is already a member of `console'.
/var/lib/dpkg/tmp.ci/preinst: ERROR: No user is a member of group 'console'. I
nstallation aborted.
/var/lib/dpkg/tmp.ci/preinst: ERROR: You probably want to run:

sudo adduser user console

/var/lib/dpkg/tmp.ci/preinst: ERROR: See also installation instructions:
https://www.whonix.org/wiki/security-misc#install
dpkg: error processing archive /var/cache/apt/archives/security-misc_3%3a16.8-
1_all.deb (--unpack):
 new security-misc package pre-installation script subprocess returned error e
xit status 201
Errors were encountered while processing:
 /var/cache/apt/archives/security-misc_3%3a16.8-1_all.deb
Scanning application launchers
Launchers are updated
E: Sub-process /usr/bin/dpkg returned an error code (1)
1 Like

Following github.com/Whonix/security-misc/blob/master/debian/security-misc.preinst#L34, and after adding the user to the group by myself problem was resolved

Why user needs to add himself to root group manually tho?

1 Like

Welcome to Whonix forums and thank you for your interest in security-misc!

Works as expected. The solution is included in the error message.

security-misc/debian/security-misc.preinst at master · Kicksecure/security-misc · GitHub

   ## group 'sudo' membership required to use 'su'
   ## /usr/share/pam-configs/wheel-security-misc
   addgroup root sudo

Related:

https://community.parrotsec.org/t/linux-security-hardening-ehancement/10672

Actually I need to correct my above answer. Nowhere it’s said “add user to group root”. But saying:

ERROR: You probably want to run:
sudo adduser user sudo

See readme under

restricts access to the root account

Yeah I get it. Check out PR debian: .preinst, add user to groups automatically by dalechyn · Pull Request #74 · Kicksecure/security-misc · GitHub

1 Like

Left a review there just now.

1 Like