tasket Qubes-VM-hardening issues

tasket / Qubes-VM-hardening

Fend off malware at Qubes VM startup

GNU General Public License v3.0

74 stars 11 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

use new qrexec policy format in example cmd

#48 xyhhx opened 1 month ago
0
Add support for Fedora and ArchLinux to configure-sudo-prompt

#46 Ashaman- opened 4 years ago
0
Notifications

#45 akkuladezeit opened 5 years ago
0
Archlinux

#44 netizen0 closed 5 years ago
3
Qubes-VM-hardening breaks msgcollector / msgdispatcher

#43 adrelanos opened 5 years ago
0
mount /tmp /var/tmp /dev/shm with nodev nosuid noexec

#42 adrelanos opened 5 years ago
3
Disable suid in /rw

#41 tasket closed 5 years ago
1
debian-10 vpn malfunction vm-boot-protect

#40 pugege closed 5 years ago
1
ibrowse tag ineffective w Firefox v67 and later

#39 tasket opened 5 years ago
1
does not cover $HOME/.pam_environment

#38 adrelanos closed 5 years ago
1
Move chdirs, chfiles into service file for easier customization

#37 tasket closed 5 years ago
1
Fix typo in name of is_templatevm function

#36 dmoerner closed 5 years ago
0
Labeled configurations

#35 tasket closed 5 years ago
2
run after qubes-mount-dirs.service for code simplification?

#34 adrelanos opened 5 years ago
2
port to plain Debian (non-Qubes)

#33 adrelanos opened 5 years ago
10
remove no longer needed Whonix related specifics

#32 adrelanos closed 5 years ago
1
Whonix: vm-boot-protect cannot mount volume as read-write

#31 tasket opened 5 years ago
0
does not cover /usr/local/etc

#30 adrelanos closed 5 years ago
4
Anon-Connection-Wizard does not start in sys-whonix (whonix-gw 15)

#29 0brand opened 5 years ago
8
Support Whonix persistent files

#28 tasket opened 5 years ago
1
does not cover systemd --user services

#27 adrelanos closed 5 years ago
1
installation

#26 subproc closed 5 years ago
1
Will this be added to Qubes?

#25 t4777sd opened 6 years ago
4
List of files to delete

#24 tasket closed 5 years ago
1
Unable to mount external USB drives

#23 tortugaverde98 opened 6 years ago
7
How to specify options for installing?

#22 setsky closed 6 years ago
1
Delay unmount so drop-in scripts can access $rw

#21 tasket closed 5 years ago
1
Merge SHA lists before running check

#20 tasket closed 6 years ago
1
Add configuration file support

#19 tasket closed 5 years ago
3
VM first-run requires restart

#18 tasket opened 6 years ago
2
Add hook for malware detection / antivirus

#17 tasket closed 5 years ago
1
List of packages to auto-remove at startup

#16 tasket closed 5 years ago
1
Improve log handling

#15 tasket opened 6 years ago
0
Option to unconditionally boot in a 'rescue' mode

#14 tasket closed 6 years ago
1
Configurable sequence of execution

#13 tasket opened 6 years ago
0
Default whitelists

#12 tasket opened 6 years ago
1
Delete all configuration files at runtime

#11 tasket closed 6 years ago
0
Installer: auto-protect /home files from root exploits

#10 tasket closed 5 years ago
1
Consider additional /home scripts requiring protection

#9 tasket opened 6 years ago
1
Some general feedback

#8 najamelan closed 6 years ago
2
Display user feedback for failure mode

#7 tasket closed 6 years ago
3
Consider conditionals to handle each VM type

#6 tasket opened 7 years ago
0
Add whitelists to retain some files in /rw/config etc

#5 tasket closed 6 years ago
6
File change detection

#4 tasket closed 6 years ago
2
implement as systemd unit file

#2 adrelanos closed 6 years ago
10
Possibly make root parts of /rw non-persistent

#1 tasket closed 6 years ago
2