14 Commits

Author	SHA1	Message	Date
Patrick Schleizer	3ea587187e	no need to exclude xorg nosuid on Debian ... http://forums.whonix.org/t/permission-hardening/8655/25	2019-12-21 06:53:07 -05:00
Patrick Schleizer	d220bb3bc4	suid /usr/lib/chromium/chrome-sandbox whitelist	2019-12-20 13:07:01 -05:00
Patrick Schleizer	77b3dd5d6b	comments	2019-12-20 13:02:33 -05:00
Patrick Schleizer	d7bd477e73	add "/usr/lib/xorg/Xorg.wrap whitelist" ... until this is researched https://manpages.debian.org/buster/xserver-xorg-legacy/Xorg.wrap.1.en.html https://lwn.net/Articles/590315/	2019-12-20 12:59:27 -05:00
Patrick Schleizer	17e8605119	add matchwhitelist feature ... add "/usr/lib/virtualbox/ matchwhitelist"	2019-12-20 12:57:24 -05:00
Patrick Schleizer	3fab387669	suid /usr/bin/firejail whitelist ... There is a controversy about firejail but those who choose to install it should be able to use it. https://www.whonix.org/wiki/Dev/Firejail#Security	2019-12-20 12:50:35 -05:00
Patrick Schleizer	d3f16a5bf4	sgid /usr/lib/qubes/qfile-unpacker whitelist	2019-12-20 12:47:10 -05:00
Patrick Schleizer	508ec0c6fa	comment	2019-12-20 12:34:07 -05:00
Patrick Schleizer	1b569ea790	comment	2019-12-20 12:32:36 -05:00
Patrick Schleizer	e28da89253	/bin/sudo whitelist / /bin/bwrap whitelist	2019-12-20 09:48:06 -05:00
Patrick Schleizer	6d30e3b4a2	do not remove suid from whitelisted binaries ever ... https://forums.whonix.org/t/permission-hardening/8655/13	2019-12-20 08:13:23 -05:00
Patrick Schleizer	48fe7312bf	update config	2019-12-20 05:57:41 -05:00
Patrick Schleizer	87d820d84c	comment	2019-12-20 05:54:16 -05:00
Patrick Schleizer	46466c12ad	parse drop-in config folder rather than only one config file	2019-12-20 05:49:11 -05:00