Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2024-12-25 10:29:27 -05:00
Code Issues Packages Projects Releases Wiki Activity

matchwhitelist /qubes/qfile-unpacker to match both

Browse Source 
- /usr/lib/qubes/qfile-unpacker whitelist
- /lib/qubes/qfile-unpacker
This commit is contained in:
Patrick Schleizer 2019-12-23 01:38:31 -05:00
parent 34bf245713
commit d484b299ea
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
etc/permission-hardening.d/30_default.conf
View File

@ -33,14 +33,9 @@
/usr/bin/firejail whitelist
######################################################################
# SUID exact match whitelist - research required
# SUID exact match whitelist
######################################################################
## TODO: research required
## https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubes-rpc/qfile-unpacker.c
/usr/lib/qubes/qfile-unpacker whitelist
## https://manpages.debian.org/buster/xserver-xorg-legacy/Xorg.wrap.1.en.html
## https://lwn.net/Articles/590315/
## http://forums.whonix.org/t/permission-hardening/8655/25
@ -54,6 +49,12 @@
/usr/lib/virtualbox/ matchwhitelist
## https://github.com/QubesOS/qubes-core-agent-linux/blob/master/qubes-rpc/qfile-unpacker.c
## match both:
#/usr/lib/qubes/qfile-unpacker whitelist
#/lib/qubes/qfile-unpacker
/qubes/qfile-unpacker matchwhitelist
######################################################################
# SUID regex match whitelist
######################################################################