Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-06-21 04:34:27 -04:00
Code Issues Projects Releases Packages Wiki Activity

sgid /usr/lib/qubes/qfile-unpacker whitelist

Browse source
This commit is contained in:
Patrick Schleizer 2019-12-20 12:47:10 -05:00
parent 508ec0c6fa
commit d3f16a5bf4
No known key found for this signature in database
GPG key ID: CB8D50BB77BB3C48
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
etc/permission-hardening.d/30_default.conf
View file

@ -24,6 +24,10 @@
/usr/lib/spice-gtk/spice-client-glib-usb-acl-helper whitelist /usr/lib/spice-gtk/spice-client-glib-usb-acl-helper whitelist
/usr/lib/x86_64-linux-gnu/utempter/utempter whitelist /usr/lib/x86_64-linux-gnu/utempter/utempter whitelist
## TODO: research
## https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubes-rpc/qfile-unpacker.c
/usr/lib/qubes/qfile-unpacker whitelist
## Permission hardening. ## Permission hardening.
/home/ 0755 root root /home/ 0755 root root
/home/user/ 0700 user user /home/user/ 0700 user user