Qubes sudo / su / root Hardening - Development Discussion
|
|
62
|
4111
|
February 4, 2025
|
Is RAM Wipe possible inside Whonix? Cold Boot Attack Defense
|
|
60
|
5156
|
January 31, 2025
|
user-sysmaint-split - Role-Based Boot Modes - Persistent User / Live user / Persistent sysmaint (system maintenance)
|
|
55
|
5041
|
January 15, 2025
|
Stackable Wrappers
|
|
13
|
1675
|
December 31, 2024
|
early-rng-init-tools for better entropy?
|
|
4
|
1878
|
December 26, 2024
|
SUID Disabler and Permission Hardener
|
|
104
|
4922
|
December 26, 2024
|
vanguards - Additional protections for Tor Onion Services
|
|
70
|
3612
|
November 6, 2024
|
enable Linux kernel gpg verification in grub and/or enable Secure Boot by default
|
|
57
|
4358
|
July 13, 2024
|
Chromium Browser for Kicksecure Discussions (not Whonix)
|
|
98
|
4176
|
May 28, 2024
|
(re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security?
|
|
82
|
5269
|
February 22, 2024
|
blocking networking until sdwdate finished
|
|
12
|
4119
|
February 1, 2024
|
SysRq (Magic SysRq key)
|
|
72
|
3659
|
November 26, 2023
|
kernel recompilation for better hardening
|
|
536
|
6260
|
November 16, 2023
|
enforce kernel module software signature verification [module signing] / disallow kernel module loading by default
|
|
69
|
5101
|
November 12, 2023
|
make symlink attacks and other /tmp based attacks harder or impossible using libpam-tmpdir
|
|
8
|
2574
|
November 8, 2023
|
panic button / panic shutdown / BusKill - The USB kill cord for your laptop
|
|
11
|
1808
|
July 17, 2023
|
use Xfce with Wayland
|
|
27
|
4364
|
June 10, 2023
|
System-wide sandboxing framework - sandbox-app-launcher
|
|
371
|
4977
|
January 3, 2023
|
Different colors in Whonix-GW and Whonix-WS
|
|
5
|
1093
|
October 3, 2022
|
install apparmor-profiles apparmor-profiles-extra apparmor-profiles-kicksecure by default
|
|
8
|
1760
|
August 7, 2022
|
Delete/Disable nobody user from whonix passwd
|
|
1
|
1334
|
July 24, 2022
|
Moar Entropy Sources
|
|
22
|
2596
|
July 3, 2022
|
Feature Request: Make tb-downloader/updater (anondist) use installed Tor
|
|
0
|
678
|
May 31, 2022
|
Restrict root access
|
|
116
|
5050
|
June 1, 2022
|
Restricting access to and stripping down default installed compilers and debuggers
|
|
4
|
1311
|
April 4, 2022
|
twuewand - a truerand algorithm for generating entropy - Whonix integration
|
|
25
|
2551
|
October 9, 2021
|
Thunderbird 78 Deprecates Enigmail
|
|
22
|
2934
|
August 26, 2021
|
Installation of Antivirus Scanners by Default
|
|
7
|
2358
|
March 2, 2021
|
Hardened Kernel vs LKRG
|
|
13
|
1588
|
December 20, 2020
|
Screen Locker (In)Security - Can we disable these at least 4 backdoors?
|
|
12
|
2902
|
December 13, 2020
|