Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-01-12 14:49:26 -05:00
Code Issues Packages Projects Releases Wiki Activity

/fusermount matchwhitelist

Browse Source 
unbreak AppImages such as electrum Bitcoin wallet

https://forums.whonix.org/t/disable-suid-binaries/7706/57
This commit is contained in:
Patrick Schleizer 2019-12-26 05:44:35 -05:00
parent 507a30d6e3
commit 674840e6f9
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
etc/permission-hardening.d/30_default.conf
View File

@ -27,6 +27,9 @@
## enable. TODO: research
#/utempter/utempter disablewhitelist
## If you are not going to use AppImages such as electrum Bitcoin wallet.
#/fusermount disablewhitelist
######################################################################
# SUID exact match whitelist
######################################################################
@ -81,6 +84,10 @@ polkit-agent-helper-1 matchwhitelist
dbus-daemon-launch-helper matchwhitelist
/utempter/utempter matchwhitelist
## required for AppImages such as electrum Bitcoin wallet
## https://forums.whonix.org/t/disable-suid-binaries/7706/57
/fusermount matchwhitelist
######################################################################
# Permission Hardening
######################################################################