SecureDrop apt Repository

This document contains brief descriptions of the Debian packages hosted and maintained by Freedom of the Press Foundation in our apt repository (apt.freedom.press).

linux-image-*-grsec

This package contains the Linux kernel image, patched with grsecurity. Listed as a dependency of securedrop-grsec.

ossec-agent

Installs the OSSEC agent, repackaged for Ubuntu. Listed as a dependency of securedrop-ossec-agent.

ossec-server

Installs the OSSEC manager, repackaged for Ubuntu. Listed as a dependency of securedrop-ossec-server.

securedrop-app-code

Packages the SecureDrop application code, Python pip dependencies and AppArmor profiles.

securedrop-ossec-agent

Installs the SecureDrop-specific OSSEC configuration for the Application Server.

securedrop-ossec-server

Installs the SecureDrop-specific OSSEC configuration for the Monitor Server.

securedrop-grsec

SecureDrop grsecurity kernel metapackage, depending on the latest version of linux-image-*-grsec.

securedrop-keyring

Packages the public signing key for this apt repository. Allows for managed key rotation via automatic updates, as implemented in SecureDrop 0.3.10.

Note

The SecureDrop install process configures a custom Linux kernel hardened with the grsecurity patch set. Only binary images are hosted in the apt repo. For source packages, see the Source Offer.