Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-07 11:32:44 -04:00
Code Issues Projects Releases Packages Wiki Activity

comments

Browse source
This commit is contained in:
Patrick Schleizer 2023-11-06 16:40:22 -05:00
parent 2c1a3da433
commit a40b9bc095
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
etc/permission-hardening.d/25_default_whitelist_qubes.conf
View file

@ -7,7 +7,11 @@
## TODO: research ## TODO: research
## https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubes-rpc/qfile-unpacker.c ## https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubes-rpc/qfile-unpacker.c
##
## Qubes upstream security issue:
## qfile-unpacker allows unprivileged users in VMs to gain root privileges
## https://github.com/QubesOS/qubes-issues/issues/8633 ## https://github.com/QubesOS/qubes-issues/issues/8633
##
## match both: ## match both:
#/usr/lib/qubes/qfile-unpacker whitelist #/usr/lib/qubes/qfile-unpacker whitelist
#/lib/qubes/qfile-unpacker #/lib/qubes/qfile-unpacker