whonixcheck Hardening
Contents
Prevent Autostart[edit]
To prevent whonixcheck from automatically starting, run.
sudo systemctl mask whonixcheck
Prevent Downloading Whonix News and Whonix User Census Counting[edit]
 | Complete these steps on both Whonix-Gateway and Whonix-Workstation. |
This will prevent downloading of Whonix News and Whonix census (counting of Whonix users). [1]
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
whonixcheck_skip_functions+=" download_whonix_news "
Prevent Polluting TransPort[edit]
| Whonix-Workstation only. |
Deactivate the TransPort Test for better Stream Isolation.
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
WHONIXCHECK_DISABLE_TRANS_PORT_TEST="1"
Save.
Prevent Running apt-get[edit]
| Complete these steps on both Whonix-Gateway and Whonix-Workstation. |
This prevents the running of apt-get by whonixcheck.
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
whonixcheck_skip_functions+=" check_operating_system "
Prevent torproject.org Connections[edit]
| Complete these steps on both Whonix-Gateway and Whonix-Workstation. |
Deactivate SocksPort Test, TransPort Test and Tor Browser Update check.
Open /etc/whonix.d/50_user.conf in an editor with root rights.
If you are using a graphical Whonix or Qubes-Whonix with KDE, run.
kdesudo kwrite /etc/whonix.d/50_user.conf
If you are using a graphical Whonix or Qubes-Whonix with XFCE, run.
kdesudo mousepad /etc/whonix.d/50_user.conf
If you are using a terminal-only Whonix, run.
sudo nano /etc/whonix.d/50_user.conf
Add the following content.
WHONIXCHECK_DISABLE_SOCKS_PORT_TEST="1" WHONIXCHECK_DISABLE_TRANS_PORT_TEST="1" whonixcheck_skip_functions+=" check_torbrowser "
Save.
Footnotes[edit]
License[edit]
Whonix Whonixcheck Hardening wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Whonix Whonixcheck Hardening wiki page Copyright (C) 2012 - 2018 ENCRYPTED SUPPORT LP <adrelanos@riseup.net>
This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.
Comments will be deleted after some time. Specifically after comments have been addressed in form of wiki enhancements. See Wiki Comments Policy.
Please help us to improve the Whonix Wikipedia Page. Also see the feedback thread.
This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.
Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)
Whonix is provided by ENCRYPTED SUPPORT LP. See Imprint.
Enable comment auto-refresher