Git-Mirrors/Qubes-VM-hardening
1
0
Fork 0
mirror of https://github.com/tasket/Qubes-VM-hardening.git synced 2024-10-01 06:35:42 -04:00
Code Issues Packages Projects Releases Wiki Activity

fix backup rm sequence

Browse Source
This commit is contained in:
Christopher Laprise 2019-08-13 14:46:03 -04:00
parent 8f8e7e6595
commit 876491ceee
No known key found for this signature in database
GPG Key ID: 448568C8B281C952
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
vm-boot-protect.sh
View File

@ -30,7 +30,6 @@ rwbak=$rw/vm-boot-protect
errlog=/var/run/vm-protect-error
servicedir=/var/run/qubes-service
defdir=/etc/default/vms
save_backup=${save_backup:-1}
version="0.9.0b"
# Define sh, bash, X and desktop init scripts in /home/user
@ -44,7 +43,8 @@ chdirs_add=${chdirs_add:-""}
# Define dirs to apply quarrantine / whitelists
privdirs=${privdirs:-"/rw/config /rw/usrlocal /rw/bind-dirs"}
privdirs_add=""
privdirs_add=${privdirs_add:-""}
save_backup=${save_backup:-1}
# Placeholder function: Runs at end
@ -264,12 +264,6 @@ if qsvc vm-boot-protect-root && is_rwonly_persistent; then
fi
if qsvc vm-boot-protect || qsvc vm-boot-protect-root; then
echo "Preparing for unmount"
make_immutable
umount $rw
fi
# Keep configs invisible at runtime...
rm -rf "$defdir" $servicedir/vm-boot-tag* $servicedir/vm-boot-protect* $errlog
@ -279,4 +273,10 @@ if [ $save_backup = 0 ]; then
rm -rf $rwbak
fi
if qsvc vm-boot-protect || qsvc vm-boot-protect-root; then
echo "Preparing for unmount"
make_immutable
umount $rw
fi
exit 0