Whonix Wiki Download Docs News Support Tips Issues Contribute DONATE

Enforce installed profiles by default

since latest release of whonix, apparmor profiles seems to be installed by default which is good. what is not good however, is that they are not enforced by default. this might cause confusion and provide fake sense of security to newbies who think their apps are apparmored

Which profile(s) specifically?

Quote Whonix homepage https://www.whonix.org/

Risk Minimization
AppArmor profiles restrict the capabilities of commonly used, high-risk applications. →

And after clicking the ->…

AppArmor profiles restrict the capabilities of commonly used, high-risk applications such as Tor Browser.

That link leads to AppArmor which has all the details.