Git-Mirrors/Qubes-VM-hardening
1
0
Fork 0
mirror of https://github.com/tasket/Qubes-VM-hardening.git synced 2025-04-11 10:19:15 -04:00
Code Issues Packages Projects Releases Wiki Activity

feat(configure-sudo-prompt): use new qrexec policy format in example cmd

Browse Source
This commit is contained in:
xyhhx 2024-10-24 20:19:22 -04:00
parent b85fac0282
commit d1d57b29bd
No known key found for this signature in database
GPG Key ID: 0960B11DB1AC1C5D
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
configure-sudo-prompt
View File

@ -66,8 +66,9 @@ Next.... Enable auth prompts in dom0 with the following commands:
[user@dom0 ~]$ sudo su -
[root@dom0 /]# echo "/usr/bin/echo 1" >/etc/qubes-rpc/qubes.VMAuth
[root@dom0 /]# chmod +x /etc/qubes-rpc/qubes.VMAuth
[root@dom0 /]# echo "@anyvm dom0 ask,default_target=dom0" \
>/etc/qubes-rpc/policy/qubes.VMAuth
[root@dom0 /]# echo "qubes.VMAuth * @anyvm dom0 ask,default_target=dom0" \
>> /etc/qubes/policy.d/10-user.policy
Optionally replacing 10-user.policy with any other policy file of your choice.
'
fi