|
(re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security?
|
|
83
|
5400
|
June 6, 2025
|
|
SUID Disabler and Permission Hardener
|
|
105
|
5001
|
May 21, 2025
|
|
Qubes sudo / su / root Hardening - Development Discussion
|
|
70
|
4292
|
May 21, 2025
|
|
Is RAM Wipe possible inside Whonix? Cold Boot Attack Defense
|
|
63
|
5261
|
May 7, 2025
|
|
user-sysmaint-split - Role-Based Boot Modes - Persistent User / Live user / Persistent sysmaint (system maintenance)
|
|
57
|
5189
|
May 6, 2025
|
|
panic button / panic shutdown / BusKill - The USB kill cord for your laptop
|
|
12
|
1909
|
April 9, 2025
|
|
Chromium Browser for Kicksecure Discussions (not Whonix)
|
|
99
|
4335
|
March 14, 2025
|
|
Stackable Wrappers
|
|
13
|
1702
|
December 31, 2024
|
|
early-rng-init-tools for better entropy?
|
|
4
|
1902
|
December 26, 2024
|
|
vanguards - Additional protections for Tor Onion Services
|
|
70
|
3761
|
November 6, 2024
|
|
enable Linux kernel gpg verification in grub and/or enable Secure Boot by default
|
|
57
|
4421
|
July 13, 2024
|
|
blocking networking until sdwdate finished
|
|
12
|
4142
|
February 1, 2024
|
|
SysRq (Magic SysRq key)
|
|
72
|
3691
|
November 26, 2023
|
|
kernel recompilation for better hardening
|
|
536
|
6374
|
November 16, 2023
|
|
enforce kernel module software signature verification [module signing] / disallow kernel module loading by default
|
|
69
|
5206
|
November 12, 2023
|
|
make symlink attacks and other /tmp based attacks harder or impossible using libpam-tmpdir
|
|
8
|
2678
|
November 8, 2023
|
|
use Xfce with Wayland
|
|
27
|
4442
|
June 10, 2023
|
|
System-wide sandboxing framework - sandbox-app-launcher
|
|
371
|
5049
|
January 3, 2023
|
|
Different colors in Whonix-GW and Whonix-WS
|
|
5
|
1109
|
October 3, 2022
|
|
install apparmor-profiles apparmor-profiles-extra apparmor-profiles-kicksecure by default
|
|
8
|
1797
|
August 7, 2022
|
|
Delete/Disable nobody user from whonix passwd
|
|
1
|
1355
|
July 24, 2022
|
|
Moar Entropy Sources
|
|
22
|
2610
|
July 3, 2022
|
|
Feature Request: Make tb-downloader/updater (anondist) use installed Tor
|
|
0
|
688
|
May 31, 2022
|
|
Restrict root access
|
|
116
|
5121
|
June 1, 2022
|
|
Restricting access to and stripping down default installed compilers and debuggers
|
|
4
|
1319
|
April 4, 2022
|
|
twuewand - a truerand algorithm for generating entropy - Whonix integration
|
|
25
|
2563
|
October 9, 2021
|
|
Thunderbird 78 Deprecates Enigmail
|
|
22
|
2951
|
August 26, 2021
|
|
Installation of Antivirus Scanners by Default
|
|
7
|
2389
|
March 2, 2021
|
|
Hardened Kernel vs LKRG
|
|
13
|
1610
|
December 20, 2020
|
|
Screen Locker (In)Security - Can we disable these at least 4 backdoors?
|
|
12
|
2947
|
December 13, 2020
|