Git-Mirrors/Qubes-VM-hardening
1
0
Fork 0
mirror of https://github.com/tasket/Qubes-VM-hardening.git synced 2025-01-11 15:39:44 -05:00
Code Issues Packages Projects Releases Wiki Activity
Fend off malware at Qubes VM startup
5 Commits 3 Branches 7 Tags 189 KiB
Shell 97%
JavaScript 2.1%
Makefile 0.9%
39c40a18ac
Go to file
tasket 39c40a18ac Update README.md
2017-03-14 22:23:43 -04:00
rc.local Prevent abort 2017-03-14 22:11:29 -04:00
README.md Update README.md 2017-03-14 22:23:43 -04:00

README.md

Qubes-VM-hardening

Files for enhancing Qubes VM security and privacy

rc.local: Protect sh and bash init files

Placed in /etc/rc.local of a template VM, this makes the shell init files immutable so PATH and alias cannot be used to hijack commands like su and sudo. I combed the dash and bash docs to address all the user-writable files. Feel free to comment or create issue if you see an omission or other problem.

See also:

Enabling dom0 prompt for sudo

AppArmor Profiles