mustard/ansible-playbooks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: add additional binary that needs suid for qvm-copy to work

Browse source
This commit is contained in:
mustard 2025-09-19 02:38:11 +02:00
parent bbd2e01bac
commit 8d7c206cbb
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
remove_suid.sh
View file

@ -20,6 +20,7 @@ whitelist=(
# Need to allowlist qrexec binaries to ensure qubes templates (hopefully) don't break, not sure why they're duplicated in /usr/bin and /usr/sbin
"/usr/bin/qfile-unpacker"
"/usr/sbin/qfile-unpacker"
"/usr/lib/qubes/qfile-unpacker"
"/usr/bin/qrexec-client-vm"
"/usr/sbin/qrexec-client-vm"
"/usr/bin/qrexec-fork-server"
@ -38,7 +39,6 @@ whitelist=(
"/usr/sbin/qrexec-policy-graph"
"/usr/bin/qrexec-policy-restore"
"/usr/sbin/qrexec-policy-restore"
# Required for nvidia closed driver images
"/usr/bin/nvidia-modprobe"
# https://gitlab.freedesktop.org/polkit/polkit/-/issues/168