Qubes sudo / su / root Hardening - Development Discussion
|
|
71
|
4336
|
July 2, 2025
|
(re-)mount home [and other?] with noexec (and nosuid [among other useful mount options]) for better security?
|
|
83
|
5443
|
June 6, 2025
|
SUID Disabler and Permission Hardener
|
|
105
|
5028
|
May 21, 2025
|
Is RAM Wipe possible inside Whonix? Cold Boot Attack Defense
|
|
63
|
5280
|
May 7, 2025
|
user-sysmaint-split - Role-Based Boot Modes - Persistent User / Live user / Persistent sysmaint (system maintenance)
|
|
57
|
5227
|
May 6, 2025
|
panic button / panic shutdown / BusKill - The USB kill cord for your laptop
|
|
12
|
1929
|
April 9, 2025
|
Chromium Browser for Kicksecure Discussions (not Whonix)
|
|
99
|
4364
|
March 14, 2025
|
Stackable Wrappers
|
|
13
|
1708
|
December 31, 2024
|
early-rng-init-tools for better entropy?
|
|
4
|
1907
|
December 26, 2024
|
vanguards - Additional protections for Tor Onion Services
|
|
70
|
3790
|
November 6, 2024
|
enable Linux kernel gpg verification in grub and/or enable Secure Boot by default
|
|
57
|
4433
|
July 13, 2024
|
blocking networking until sdwdate finished
|
|
12
|
4148
|
February 1, 2024
|
SysRq (Magic SysRq key)
|
|
72
|
3698
|
November 26, 2023
|
kernel recompilation for better hardening
|
|
536
|
6409
|
November 16, 2023
|
enforce kernel module software signature verification [module signing] / disallow kernel module loading by default
|
|
69
|
5234
|
November 12, 2023
|
make symlink attacks and other /tmp based attacks harder or impossible using libpam-tmpdir
|
|
8
|
2702
|
November 8, 2023
|
use Xfce with Wayland
|
|
27
|
4456
|
June 10, 2023
|
System-wide sandboxing framework - sandbox-app-launcher
|
|
371
|
5078
|
January 3, 2023
|
Different colors in Whonix-GW and Whonix-WS
|
|
5
|
1111
|
October 3, 2022
|
install apparmor-profiles apparmor-profiles-extra apparmor-profiles-kicksecure by default
|
|
8
|
1808
|
August 7, 2022
|
Delete/Disable nobody user from whonix passwd
|
|
1
|
1361
|
July 24, 2022
|
Moar Entropy Sources
|
|
22
|
2619
|
July 3, 2022
|
Feature Request: Make tb-downloader/updater (anondist) use installed Tor
|
|
0
|
689
|
May 31, 2022
|
Restrict root access
|
|
116
|
5152
|
June 1, 2022
|
Restricting access to and stripping down default installed compilers and debuggers
|
|
4
|
1319
|
April 4, 2022
|
twuewand - a truerand algorithm for generating entropy - Whonix integration
|
|
25
|
2566
|
October 9, 2021
|
Thunderbird 78 Deprecates Enigmail
|
|
22
|
2953
|
August 26, 2021
|
Installation of Antivirus Scanners by Default
|
|
7
|
2394
|
March 2, 2021
|
Hardened Kernel vs LKRG
|
|
13
|
1615
|
December 20, 2020
|
Screen Locker (In)Security - Can we disable these at least 4 backdoors?
|
|
12
|
2958
|
December 13, 2020
|