Actually, we don’t use this file anymore in our current Calamares install sequence (module users is skipped), thus I guess no need to change it.
Currently when booting 15.0.0.9.5 Whonix-Host iso (and all previous recent successful builds), user user
has full sudo rights (although not in sudo group). This behavior is then reproduced in the Whonix-Host installed version. I gather this not the expected behavior as per current “restricted root” policy? What should be the default expected behavior regarding sudo/root/admin rights in Kicksecure/Whonix GW-WS?
Regarding last merged pull requests (branding), everything seems to work as intended (see screenshots below).
Still needs fixing/considering
- Whonix VM disk images are still not set in ro mode
- We should have auto-login enabled for user
user
(unpractical to log in when booting an ISO file) - We need to replace Kicksecure references by Whonix-Host everywhere (I am thinking /etc/motd, grub, anything else?).
- Test on real hardware (both EFI/BIOS)…
- Get rid of the default XFCE4 desktop image (replace with simple color?), add some Desktop icons (cosmetic changes, not urgent)
Some screenshots:
-
Booting on Whonix-Host Live ISO 15.0.0.9.5, showing desktop, Install Whonix-Host icon, as well as a terminal displaying user
user
root access
-
Clicking on Install Whonix-Host icon launches Calamares. It needs sudo rights to proceed.
-
Whonix-Host Installer (Calamares) Welcome page
-
Whonix-Host Installer (Calamares), installing in progress (full-disk encryption)