Questions: Protection against local forensics/privacy problems with Fedora sys-net, sys-firewall

[shie...@danwin1210.me]

The Whonix Wiki recommends disabling core dumps and swap. The idea is to
protect against local forensics by reducing usability.
1.1) Is this also recommended for Qubes-Whonix?
1.2) How can I do this?
1.3) What are the security implications? Is it recommended?

2) Is there an easy way to save the qubes-os.org wiki locally?

Fedora templates, which can be ping home (sys-net, sys-firewall) using
some captive portal detection.
My idea was to replace them with Debian.
3.1) Can I do this by simply replacing the templates?
3.2) Is there an instruction how to build a fresh sys-net, sys-firewall
from a debian 10-minute template?
3.3) What are the security implications? Is it recommended?

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2020-08-06 7:47 PM, shie1ohk via qubes-users wrote:
> 2) Is there an easy way to save the qubes-os.org wiki locally?
>

Yes. As explained on the Documentation Guidelines page [1], "All Qubes
OS documentation pages are stored as plain text files in the dedicated
qubes-doc repository. [2] By cloning and regularly pulling from this
repo, users can maintain their own up-to-date offline copy of all
Qubes documentation rather than relying solely on the web."

In fact, you can save the entire Qubes OS website this way. [3]


[1] https://www.qubes-os.org/doc/doc-guidelines/
[2] https://github.com/QubesOS/qubes-doc
[3] https://github.com/QubesOS/qubesos.github.io

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=1LsF
-----END PGP SIGNATURE-----