Git-Mirrors/Qubes-VM-hardening
1
0
Fork 0
mirror of https://github.com/tasket/Qubes-VM-hardening.git synced 2025-12-17 17:14:29 -05:00
Code Issues Projects Releases Packages Wiki Activity

feat(configure-sudo-prompt): use new qrexec policy format in example cmd

Browse source
This commit is contained in:
xyhhx 2024-10-24 20:19:22 -04:00
parent b85fac0282
commit d1d57b29bd
No known key found for this signature in database
GPG key ID: 0960B11DB1AC1C5D
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
configure-sudo-prompt
View file

@ -66,8 +66,9 @@ Next.... Enable auth prompts in dom0 with the following commands:
[user@dom0 ~]$ sudo su -
[root@dom0 /]# echo "/usr/bin/echo 1" >/etc/qubes-rpc/qubes.VMAuth
[root@dom0 /]# chmod +x /etc/qubes-rpc/qubes.VMAuth
[root@dom0 /]# echo "@anyvm dom0 ask,default_target=dom0" \
>/etc/qubes-rpc/policy/qubes.VMAuth
[root@dom0 /]# echo "qubes.VMAuth * @anyvm dom0 ask,default_target=dom0" \
>> /etc/qubes/policy.d/10-user.policy
Optionally replacing 10-user.policy with any other policy file of your choice.
'
fi