As discussed in the forums, in Okular, the current default PDF reader in Whonix, there is a privacy and anonymity risk in PDF files which contain 'DRM' which may track the user in Whonix through such code.
Can we have ‘Obey DRM limitations’ unticked by default in Whonix to help mitigate this risk?
Interesting backstory about this anti-feature in Debian. Nonetheless I've found a solution.
This is done by changing the following file:
/home/user/.kde/share/config/okularpartrc
to:
[$Version]
update_info=okular.upd:sep_settings
[Core General]
ObeyDRM=false
HulaHoop (HulaHoop):
/home/user/.kde/share/config/okularpartrc
Ought to avoid writing into the home folder.
Adding that file into this folder might do the trick.
https://github.com/Whonix/anon-apps-config/tree/master/usr/share/anon-apps-config
Please send a pull request.
Then we might still get this into Whonix 14. (Or Whonix 15.)