diff --git a/usr/lib/permission-hardener.d/25_default_whitelist_qubes.conf b/usr/lib/permission-hardener.d/25_default_whitelist_qubes.conf index d175670..4fefe4f 100644 --- a/usr/lib/permission-hardener.d/25_default_whitelist_qubes.conf +++ b/usr/lib/permission-hardener.d/25_default_whitelist_qubes.conf @@ -13,6 +13,9 @@ ## https://github.com/QubesOS/qubes-issues/issues/8633 ## ## match both: -#/usr/bin/qfile-unpacker -#/usr/lib/qubes/qfile-unpacker whitelist +## - /usr/lib/qubes/qfile-unpacker whitelist +## - Not bit-for-bit identical to /usr/lib/qubes/qfile-unpacker. +## - Stripping SUID from this does *not* break file copying. +## - TODO: further reserach required on its purpose +## - /usr/bin/qfile-unpacker qfile-unpacker matchwhitelist