diff --git a/usr/lib/permission-hardener.d/25_default_whitelist_fuse.conf b/usr/lib/permission-hardener.d/25_default_whitelist_fuse.conf index 8c5563a..084510c 100644 --- a/usr/lib/permission-hardener.d/25_default_whitelist_fuse.conf +++ b/usr/lib/permission-hardener.d/25_default_whitelist_fuse.conf @@ -5,6 +5,13 @@ ## "/usr/local/etc/permission-hardener.d/20_user.conf" for your custom ## configuration. When security-misc is updated, this file may be overwritten. -## required for AppImages such as electrum Bitcoin wallet +## Critical component of FUSE (Filesystem in USErspace) +## +## Used by things such as: +## - AppImages +## - such as electrum Bitcoin wallet +## - Docker +## If not SUID, unprivileged users will be unable to use FUSE any longer. +## ## https://forums.whonix.org/t/disable-suid-binaries/7706/57 /fusermount matchwhitelist