diff --git a/whonix-hardening.sh b/whonix-hardening.sh index 92d8185..d671676 100644 --- a/whonix-hardening.sh +++ b/whonix-hardening.sh @@ -10,3 +10,7 @@ sudo apt install --no-install-recommends lkrg-dkms linux-headers-amd64 #Enable hardened malloc echo "/usr/lib/libhardened_malloc.so/libhardened_malloc.so" >> /etc/ld.so.preload + +#Reduce kernel information leaks +#Will break a lot of applications. The apps I use on Whonix works fine with it so I am enabling it. +systemctl enable hide-hardware-info.service