How to disable DHCP in Whonix and ensure no leaks

[Patrick]

Also a separate forum thread was created:

Whonix KVM dnsmasq - listen port on host operating system - attack surface reduction

dnsmasq on the host operating system is increasing the attack surface. How did I find that out? Install Debian. Check open ports and write them to a file. sudo netstat -tulpen > old Install packages required for Whonix KVM according to Whonix KVM documentation. Check open ports again and write them to a different file. sudo netstat -tulpen > new Use any (graphical) diff viewer of your choice. meld old new Result: dnsmasq opens a listen port on the host operating sy…

[anon12802191]

@Patrick

Also a separate forum thread was created:

That thread is not related to the issue I reported. And I feel like it undermines how critical that report was. I can literally hack Whonix users I don’t even know with 0 effort

Your thread is not needed, please see Whonix for KVM

[Patrick]

Seems like you missed this:

4 posts were split to a new topic: Whonix KVM Security Bug Report

And this:

@Patrick

Since that seems a different issue, I moved it to Whonix KVM Security Bug Report

In other words:

• A) please publish your previously private report in this forum thread: [INVALID] Whonix KVM Security Bug Report - SPICE remote desktop protocol listening on all network interfaces
• B) this is a different forum thread from A): Whonix KVM dnsmasq - listen port on host operating system - attack surface reduction

[anon12802191]

You are right I missed the topic split, thanks.