Qubes-VM-hardening/README.md

7 lines
421 B
Markdown
Raw Normal View History

2017-03-14 21:53:06 -04:00
# Qubes-VM-hardening
Files for enhancing Qubes VM security and privacy
2017-03-14 22:03:31 -04:00
## rc.local: Protect sh and bash init files
Placed in /etc/rc.local of a template VM, this makes the shell init files immutable so PATH and alias cannot be used to hijack commands like su and sudo. I combed the dash and bash docs to address all the user-writable files. Feel free to comment or create issue if you see an omission or other problem.