Patrick Schleizer 2019-11-23 11:20:32 +00:00
parent d32024a3da
commit fe1f1b73a7
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
2 changed files with 12 additions and 0 deletions

5
debian/control vendored
View File

@ -98,6 +98,11 @@ Description: enhances misc security settings
things, it is disabled by default and can optionally be enabled by running
`systemctl enable hide-hardware-info.service` as root.
.
Improve Entropy Collection
.
* Load jitterentropy_rng kernel module.
/usr/lib/modules-load.d/30_security-misc.conf
.
Uncommon network protocols are blacklisted:
These are rarely used and may have unknown vulnerabilities.
/etc/modprobe.d/uncommon-network-protocols.conf

View File

@ -0,0 +1,7 @@
## Copyright (C) 2019 - 2019 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
## See the file COPYING for copying conditions.
## https://www.whonix.org/wiki/Dev/Entropy
## https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=927972
## https://forums.whonix.org/t/jitterentropy-rngd/7204
jitterentropy_rng