Git-Mirrors/tommytran732-QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts.git synced 2025-05-13 11:42:21 -04:00
Code Issues Projects Releases Packages Wiki Activity

Update whonix-hardening.sh

Browse source
This commit is contained in:
Tommy 2022-07-02 21:47:16 -04:00 • committed by GitHub
parent d58edcc5df
commit d84bad4d61
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
whonix-hardening.sh
View file

@ -9,6 +9,9 @@ sudo apt install --no-install-recommends linux-headers-amd64 lkrg-dkms -y
#Enable hardened malloc #Enable hardened malloc
echo "/usr/lib/libhardened_malloc.so/libhardened_malloc.so" | sudo tee /etc/ld.so.preload echo "/usr/lib/libhardened_malloc.so/libhardened_malloc.so" | sudo tee /etc/ld.so.preload
#Restrict /proc and access
sudo systemctl enable --now proc-hidepid.service
#Reduce kernel information leaks #Reduce kernel information leaks
#Will break a lot of applications. The apps I use on Whonix work fine with it so I am enabling it. #Will break a lot of applications. The apps I use on Whonix work fine with it so I am enabling it.
sudo systemctl enable --now hide-hardware-info.service sudo systemctl enable --now hide-hardware-info.service