Untrusted Root - improve Security by Restricting Root

[Patrick]

A step into the direction of untrusted root:

AppArmor for Complete System - Including init, PID1, Systemd, Everything! - Full System MAC policy

Currently, Whonix only has AppArmor profiles for a few high-risk applications. This isn’t the best. It would be much better to have everything confined by default, including init which would greatly increase security. This can also help a lot with the “untrusted root” idea as we can just develop a system-wide policy to restrict root. AppArmor can do this by loading a profile for systemd in the initramfs. Even when a user installs some sketchy malware, it will be restricted by default. This…