whonixcheck Hardening
Contents
Prevent Autostart[edit]
To prevent whonixcheck from automatically starting, run.
sudo systemctl mask whonixcheck
Prevent Downloading Whonix News and Whonix User Census Counting[edit]
 | Complete these steps on both Whonix-Gateway and Whonix-Workstation. |
This will prevent downloading of Whonix News and Whonix census (counting of Whonix users). [1]
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
whonixcheck_skip_functions+=" download_whonix_news "
Prevent Polluting TransPort[edit]
| Whonix-Workstation only. |
Deactivate the TransPort Test for better Stream Isolation.
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
WHONIXCHECK_DISABLE_TRANS_PORT_TEST="1"
Save.
Prevent Running apt-get[edit]
| Complete these steps on both Whonix-Gateway and Whonix-Workstation. |
This prevents the running of apt-get by whonixcheck.
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
whonixcheck_skip_functions+=" check_operating_system "
Prevent torproject.org Connections[edit]
| Complete these steps on both Whonix-Gateway and Whonix-Workstation. |
Deactivate SocksPort Test, TransPort Test and Tor Browser Update check.
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
WHONIXCHECK_DISABLE_SOCKS_PORT_TEST="1" WHONIXCHECK_DISABLE_TRANS_PORT_TEST="1" whonixcheck_skip_functions+=" check_torbrowser "
Save.
Footnotes[edit]
License[edit]
Whonix Whonixcheck Hardening wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Whonix Whonixcheck Hardening wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.
No user support in comments. See Support.
Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See Wiki Comments Policy.
Please help in testing new features and bug fixes in Whonix.
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! Read, understand and agree to Conditions for Contributions to Whonix, then Edit! Edits are held for moderation.
Copyright (C) 2012 - 2019 ENCRYPTED SUPPORT LP. Whonix is a trademark. Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Freedom Software license as Whonix itself. (Why?)
By using our website, you acknowledge that you have read, understood and agreed to our Privacy Policy, Cookie Policy, Terms of Service, and E-Sign Consent. Whonix is provided by ENCRYPTED SUPPORT LP. See Imprint.
Enable comment auto-refresher