Greetings to all, As per the pre-existing (although differently named) thread on Qubes-Whonix security disadvantages <https://groups.google.com/forum/#!topic/qubes-devel/mzjxhPsO1Xo> and seeing that Whonix didn't get a slot as an organisation for GSoC 2020 I would like to propose as an idea the implementation of security enhancements existing in non-Qubes Whonix, but not in Qubes-Whonix. The scope of this effort is not GSoC per se, but as a daily Qubes-Whonix user (one who gets very frustrated over how the upgrades work *cough*) these are things that I would like to see in my system, kloak and tirdad being at the forefront of my agenda.
To answer the questions before they arrive, yes I have installed Qubes and have built my own templates (with an extreme frustration and time focused on the Arch template on R4.x), I am aware of the development practices and consider myself a mediocre to capable Qubes Administrator. I have done informative sessions about the project on the hackerspace.gr and I run thy Qubes through i3wm (config <https://github.com/luserx0/dotfiles/blob/master/config/i3/config_qubes>, dynamic keyboard layout changing <https://github.com/luserx0/dotfiles/blob/master/config/i3/modular/i3-xkb-change-layout>) in a crusty HEADs powered thinkpad. So, the questions at hand are the following: - Is there interest for such a project to see the light of day through the SoC? - Are there any interested mentors to bear with me? I would like Patrick Schleizer or Marek to mentor (both?) because of the scope of the enhancements. I have participated in GSoC before <https://blog.freifunk.net/2019/08/26/bmx7-wireguard-tunneling-final-report/> and have done my whole development process "Qubes-native". Please jump in and offer your opinion. Arch template is another thing I would like to see stabilizing; the above proposal concerns what I think is more urgent from my user perspective. In any case I'll draft a proposal and try to have some prototype set by the end of the week (tough schedule). Regards, Harry PS: Frédéric, the install script for i3 is how I manage my in-VM configuration. Split-GNU Stow too good to be true? -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/bc261402-162d-4b36-bd6d-b952d25f6c8b%40googlegroups.com.
