1 # SOME DESCRIPTIVE TITLE
2 # Copyright (C) YEAR Free Software Foundation, Inc.
3 # This file is distributed under the same license as the PACKAGE package.
4 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
9 "Project-Id-Version: PACKAGE VERSION\n"
10 "POT-Creation-Date: 2014-03-30 16:35+0300\n"
11 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13 "Language-Team: LANGUAGE <LL@li.org>\n"
16 "Content-Type: text/plain; charset=UTF-8\n"
17 "Content-Transfer-Encoding: 8bit\n"
21 msgid "[[!meta title=\"Upgrade to more secure persistence settings\"]]\n"
26 "Tails 0.21 introduces a more secure access control over the persistent "
27 "volume settings. This also means that before Tails 0.21, an attacker who "
28 "could run an exploit from inside your Tails session could corrupt the "
29 "persistent volume settings. By doing this, an attacker could possibly gain "
30 "persistent administrator rights or install malicious software."
35 "For more technical details about the security of the persistent volume, read "
36 "our [[design document|contribute/design/persistence#security]]."
41 msgid "<div id=\"automatic_upgrade\">\n"
46 msgid "Automatic upgrade\n"
51 "We designed a migration mechanism that allows, in most cases, to upgrade "
52 "automatically to those more secure persistent volume settings. To do this "
53 "upgrade, once and for all:"
56 #. type: Bullet: '1. '
57 msgid "**Start Tails 0.21**."
60 #. type: Bullet: '2. '
62 "**Enable persistence** without the read-only option. Activating the read-"
63 "only option prevents Tails from starting correctly until the upgrade is made."
66 #. type: Bullet: '3. '
68 "If the upgrade is successful, Tails starts as usual and no notification "
73 msgid "But this automatic upgrade might not be sufficient in some cases."
79 "a. **If you skipped the upgrade to Tails 0.21 and upgraded directly\n"
80 " to Tails 0.22 or later**, then follow the instructions to [[manually copy\n"
81 " your persistent data to a new device|copy]].\n"
82 " For security reasons the automatic upgrade is not available in Tails 0.22 or\n"
89 "b. **If you have custom persistence settings or use\n"
90 " [[additional software packages|configure#additional_software]]**, the\n"
91 " corresponding settings are not upgraded automatically.\n"
97 " A notification should appear when starting Tails that indicates which\n"
98 " persistence settings are temporarily disabled. In that case, follow\n"
99 " the instructions to [[enable again your custom persistence\n"
100 " settings|upgrade#custom_settings]].\n"
105 msgid " <div class=\"caution\">\n"
111 " If you have custom persistence settings or use additional software\n"
112 " but no notification appear on the desktop, then your Tails system\n"
113 " might be corrupted. In that case, follow the instructions to [[manually copy\n"
114 " your persistent data to a new device|copy]].\n"
125 "c. **If you have good reasons to think that your persistence settings\n"
126 " are corrupted** or if you want to be extra careful, then follow the\n"
127 " instructions to [[manually copy your persistent data to a new\n"
133 msgid "<div id=\"custom_settings\">\n"
138 msgid "Enabling again your custom persistence settings\n"
143 "Custom persistence settings and additional software are disabled during the "
144 "automatic upgrade because, there is technically a possibility for these "
145 "files to be corrupted."
150 "These instructions explain how to verify the content of these files and "
151 "enable again your custom persistence settings."
154 #. type: Bullet: '1. '
156 "Start Tails and set an [[administration password|startup_options/"
157 "administration_password]]."
164 " <span class=\"menuchoice\">\n"
165 " <span class=\"guimenu\">Applications</span> ▸\n"
166 " <span class=\"guisubmenu\">Accessories</span> ▸\n"
167 " <span class=\"guimenuitem\">Root Terminal</span>\n"
169 " to open a terminal with administration rights.\n"
172 #. type: Bullet: '1. '
174 "Execute the <span class=\"code\">nautilus</span> command to open the file "
178 #. type: Bullet: '1. '
180 "In the file browser navigate to <span class=\"filename\">/live/persistence/"
181 "TailsData_unlocked</span>."
186 msgid "<span class=\"filename\">live-persistence.conf.old</span>\n"
192 "If there is a file named\n"
193 "<span class=\"filename\">live-persistence.conf.old</span> in the\n"
194 "<span class=\"filename\">TailsData_unlocked</span> folder, then some of your\n"
195 "persistence settings need to be enabled manually.\n"
198 #. type: Bullet: '1. '
200 "In the file browser, right-click on the <span class=\"filename\">live-"
201 "persistence.conf.old</span> file and open it by choosing <span class="
202 "\"guilabel\">Open with Other Application...</span> and then <span class="
203 "\"guilabel\">gedit</span>."
206 #. type: Bullet: '1. '
208 "Switch back to the file browser, right-click on the <span class=\"filename"
209 "\">persistence.conf</span> file and choose <span class=\"guilabel\">Open "
210 "with Other Application...</span> and then <span class=\"guilabel\">gedit</"
211 "span> to open it in a new tab in <span class=\"application\">gedit</span>."
214 #. type: Bullet: '1. '
216 "Switch between the two tabs corresponding to those files in <span class="
217 "\"application\">gedit</span> and compare their content. Copy from <span "
218 "class=\"filename\">live-persistence.conf.old</span> to <span class=\"filename"
219 "\">persistence.conf</span> the lines corresponding to your custom settings "
220 "that have not been upgraded automatically."
225 "Those missing lines should correspond to your custom directories or other "
226 "custom persistence settings."
232 "**If you detect unexpected lines in\n"
233 "<span class=\"filename\">live-persistence.conf.old</span>** that do not\n"
234 "correspond to any change that you have made, they might have been\n"
235 "introduced by an attacker. In this case, do the following:\n"
238 #. type: Bullet: '1. '
240 "[[Report a bug using <span class=\"application\">WhisperBack</span>|"
241 "bug_reporting]] and explain which are the lines that look suspicious to you."
244 #. type: Bullet: '1. '
246 "Keep that Tails device without modifying it in order to analyse it later if "
250 #. type: Bullet: '1. '
252 "Follow the instructions to [[manually copy your persistent data to a new "
259 "**If you do not detect any suspicious line**, close\n"
260 "<span class=\"application\">gedit</span> and delete the\n"
261 "<span class=\"filename\">live-persistence.conf.old</span> file using the\n"
267 msgid "<span class=\"filename\">live-additional-software.conf.disabled</span>\n"
273 "If there is a file named\n"
274 "<span class=\"filename\">live-additional-software.conf.disabled</span> in\n"
275 "the <span class=\"filename\">TailsData_unlocked</span> folder, then your\n"
276 "[[additional software|configure#additional_software]] need to be enabled\n"
280 #. type: Bullet: '1. '
282 "In the file browser, right-click on the <span class=\"filename\">live-"
283 "additional-software.conf.disabled</span> file and open it by choosing <span "
284 "class=\"guilabel\">Open with Other Application...</span> and then <span "
285 "class=\"guilabel\">gedit</span>."
288 #. type: Bullet: '1. '
290 "Right-click on the <span class=\"filename\">live-additional-software.conf</"
291 "span> file and choose <span class=\"guilabel\">Open with Other Application..."
292 "</span> and then <span class=\"guilabel\">gedit</span> to open it in a new "
293 "tab in <span class=\"application\">gedit</span>."
296 #. type: Bullet: '1. '
298 "Copy from <span class=\"filename\">live-additional-software.conf.disabled</"
299 "span> to <span class=\"filename\">live-additional-software.conf</span> the "
300 "lines corresponding to your additional software."
306 "**If you detect unexpected lines in\n"
307 "<span class=\"filename\">live-additional-software.conf.disabled</span>**\n"
308 "that do not correspond to any additional software added by you, they\n"
309 "might have been introduced by an attacker. In this case, do the\n"
316 "**If you do not detect any suspicious line**, close\n"
317 "<span class=\"application\">gedit</span> and delete the\n"
318 "<span class=\"filename\">live-additional-software.conf.disabled</span>\n"
319 "file using the file browser.\n"