Disabling TCP SACK, DSACK, FACK

[Patrick]

@madaidan

It would be better to keep the file but have those lines commented out by default. If a user wants to disable SACK, they can just comment out that file and it can be documented in Whonix-Workstation Security Hardening - Whonix and the readme like the hardware info restrictions.

Sure. Done in git master.

@madaidan

We can probably make our own test suite, rent a few VPSes and test them after each change. VPSes are rather cheap nowadays.

That would be cool. Patches welcome.

Unfortunately nobody ever was interested in contributing in test suite / creating tests:

automated test suite

Not written in stone, means, we can discuss this further. Tails has an automated test suite: https://tails.boum.org/contribute/release_process/test/automated_tests/ Whonix needs an automated test suite as well. Check, if https://github.com/Whonix/Whonix/blob/master/CONTRIBUTING.md is acceptable. Create an automated test suite and/or adapt whatever is useful from the Tails’ automated test suite. Share it on git(hub). Optional: package as .deb.