madaidan Goto Github PK

anon-apps-config

anonymity, privacy and security settings pre-configuration

anon-base-files

base files for Anonymity Distributions - several important miscellaneous files, such as /etc/hostname, /etc/hosts, /var/lib/dbus/machine-id and more

anon-meta-packages

Meta Packages for Anonymity Distributions - Selections of packages required/recommended to have installed on Anonymity Distributions.

apparmor-profile-anondist

AppArmor profile for Anonymity Linux Distributions - https://www.whonix.org/wiki/AppArmor - for better security (hardening).

apparmor-profile-everything

AppArmor for everything. APT, systemd, init, all systemd units, all applications. Mandatory Access Control. Security Hardening.

apparmor-profile-torbrowser

AppArmor profile for The Tor Browser Bundle (TBB) - https://www.whonix.org/wiki/AppArmor - for better security (hardening).

apparmor-profile-xchat

AppArmor profile for XChat / HexChat IRC - https://www.whonix.org/wiki/AppArmor - for better security (hardening).

bootclockrandomization

Randomizes clock when systems boots by adding a few seconds and nanoseconds to enforce the design goal, that the host clock and Gateway/Workstation clock should always slightly differ (even before secure timesync succeeded!) to prevent time based fingerprinting / linkablity issues. For better anonymity and privacy. - https://www.whonix.org/wiki/Boot_Clock_Randomization

bubblewrap

Unprivileged sandboxing tool

grapheneos.org

Sources for the GrapheneOS website.

hardened-kernel

Hardened kernel configuration optimized for virtual machines. - https://forums.whonix.org/t/kernel-recompilation-for-better-hardening/7598

hardened_malloc

Hardened Memory Allocator for many Applications to increase Security. Debian packaging fork only. Fork Homepage: https://www.whonix.org/wiki/Hardened_Malloc Upstream original: https://github.com/GrapheneOS/hardened_malloc

helper-scripts

Helper scripts useful for Anonymizing Linux Distributions

https-everywhere

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.

kconfig-hardened-check

A script for checking the hardening options in the Linux kernel config

kernel_google_crosshatch

Pixel 3, Pixel 3 XL, Pixel 3a and Pixel 3a XL kernel sources.

kloak

Keystroke-level online anonymization kernel: obfuscates typing behavior at the device level.

linux-hardened

Minimal supplement to upstream Kernel Self Protection Project changes. Features already provided by SELinux + Yama and archs other than multiarch arm64 / x86_64 aren't in scope. Only tags have stable history. Shared IRC channel with KSPP: irc.freenode.net ##linux-hardened

madaidan.github.io

onion-grater

Whitelisting filter for dangerous Tor control protocol commands - https://www.whonix.org/wiki/Dev/CPFP - For example it allows using Tor Browser's New Identity feature on Anonymity Distribution Workstations, fixes Tor Browser's about:tor default homepage and Tor Button status indicator without exposing commands that are dangerous for anonymity.

sandbox-app-launcher

An app launcher to start apps in a restrictive sandbox

sdwdate

Secure Distributed Web Date; privacy, anonymity and Tor friendly; console time fetcher and daemon; optional graphical user interface etc. Website: https://www.whonix.org/wiki/sdwdate

security-misc

Kernel Hardening; Protect Linux User Accounts against Brute Force Attacks; Improve Entropy Collection; Strong Linux User Account Separation; Enhances Misc Security Settings - https://www.whonix.org/wiki/Security-misc

src_platform_config-linux-hardware

Hardware-dependent components (profile definitions, configuration file sets, miscellaenous scripts, etc.)

temporary

usability-misc

Misc usability improvements

whonix-firewall

Whonix Firewall

whonixcheck

Anonymity and security check - https://www.whonix.org/wiki/whonixcheck