diff --git a/debian/control b/debian/control index d297502..1466f43 100644 --- a/debian/control +++ b/debian/control @@ -98,6 +98,11 @@ Description: enhances misc security settings things, it is disabled by default and can optionally be enabled by running `systemctl enable hide-hardware-info.service` as root. . + Improve Entropy Collection + . + * Load jitterentropy_rng kernel module. + /usr/lib/modules-load.d/30_security-misc.conf + . Uncommon network protocols are blacklisted: These are rarely used and may have unknown vulnerabilities. /etc/modprobe.d/uncommon-network-protocols.conf diff --git a/usr/lib/modules-load.d/30_security-misc.conf b/usr/lib/modules-load.d/30_security-misc.conf new file mode 100644 index 0000000..02dc5f0 --- /dev/null +++ b/usr/lib/modules-load.d/30_security-misc.conf @@ -0,0 +1,7 @@ +## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP +## See the file COPYING for copying conditions. + +## https://www.whonix.org/wiki/Dev/Entropy +## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927972 +## https://forums.whonix.org/t/jitterentropy-rngd/7204 +jitterentropy_rng