Placing an additional signing key into folder /usr/share/keyrings by itself alone has no impact on security as this folder is not automatically used by Debian's APT by default. See Secure Downloads to understand why curl and the parameters -tlsv1.3 are used instead of wget. Kicksecure ™ for Qubes: If not installing the passwordless-root package and/or when distribution morphing a Debian minimal template into Kicksecure ™, root terminal is required to proceed which can be started from Qubes dom0 terminal as per the Qubes upstream documentation.If the user intents to use user user without root rights for better security, the user should omit running the /usr/sbin/adduser user sudo and instead 1) make sure that another Linux user account such as user admin is a member of Linux user group sudo and 2) in case of: The following command /usr/sbin/adduser user sudo grants root rights to user user. usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/binīy comparison, when using sudo using /full/path/to/application is not required.Ī root terminal is required to proceed which can be started from Qubes dom0 terminal as per the Qubes upstream documentation. usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games When a user is using su to gain administrative rights, the user is required to use full path to the programs addgroup, adduser, reboot because when using su the PATH environment variable is not adjusted for use with root rights.

How to install curl on debin