From d84bad4d6172ebb2f13d0362f9ae28a6a8ce0988 Mon Sep 17 00:00:00 2001
From: Tommy <contact@tommytran.io>
Date: Sat, 2 Jul 2022 21:47:16 -0400
Subject: [PATCH] Update whonix-hardening.sh

---
 whonix-hardening.sh | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/whonix-hardening.sh b/whonix-hardening.sh
index 97ece4a..d534b4b 100644
--- a/whonix-hardening.sh
+++ b/whonix-hardening.sh
@@ -9,6 +9,9 @@ sudo apt install --no-install-recommends linux-headers-amd64 lkrg-dkms -y
 #Enable hardened malloc
 echo "/usr/lib/libhardened_malloc.so/libhardened_malloc.so" | sudo tee /etc/ld.so.preload
 
+#Restrict /proc and access
+sudo systemctl enable --now proc-hidepid.service
+
 #Reduce kernel information leaks
 #Will break a lot of applications. The apps I use on Whonix work fine with it so I am enabling it.
 sudo systemctl enable --now hide-hardware-info.service