Tomster/QubesOS-Scripts
1
0
Fork 0
mirror of https://github.com/tommytran732/QubesOS-Scripts synced 2024-11-09 20:21:34 -05:00
Code

Update whonix-hardening.sh

Browse Source
This commit is contained in:
Tommy 2022-07-02 21:47:16 -04:00 committed by GitHub
parent d58edcc5df
commit d84bad4d61
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
whonix-hardening.sh
View File

@ -9,6 +9,9 @@ sudo apt install --no-install-recommends linux-headers-amd64 lkrg-dkms -y
#Enable hardened malloc #Enable hardened malloc
echo "/usr/lib/libhardened_malloc.so/libhardened_malloc.so" | sudo tee /etc/ld.so.preload echo "/usr/lib/libhardened_malloc.so/libhardened_malloc.so" | sudo tee /etc/ld.so.preload
#Restrict /proc and access
sudo systemctl enable --now proc-hidepid.service
#Reduce kernel information leaks #Reduce kernel information leaks
#Will break a lot of applications. The apps I use on Whonix work fine with it so I am enabling it. #Will break a lot of applications. The apps I use on Whonix work fine with it so I am enabling it.
sudo systemctl enable --now hide-hardware-info.service sudo systemctl enable --now hide-hardware-info.service