diff --git a/whonix-hardening.sh b/whonix-hardening.sh
new file mode 100644
index 0000000..b486668
--- /dev/null
+++ b/whonix-hardening.sh
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+systemctl enable --now permission-hardening