diff --git a/remove_suid.sh b/remove_suid.sh index a10dc56..36cc862 100755 --- a/remove_suid.sh +++ b/remove_suid.sh @@ -20,6 +20,7 @@ whitelist=( # Need to allowlist qrexec binaries to ensure qubes templates (hopefully) don't break, not sure why they're duplicated in /usr/bin and /usr/sbin "/usr/bin/qfile-unpacker" "/usr/sbin/qfile-unpacker" + "/usr/lib/qubes/qfile-unpacker" "/usr/bin/qrexec-client-vm" "/usr/sbin/qrexec-client-vm" "/usr/bin/qrexec-fork-server" @@ -38,7 +39,6 @@ whitelist=( "/usr/sbin/qrexec-policy-graph" "/usr/bin/qrexec-policy-restore" "/usr/sbin/qrexec-policy-restore" - # Required for nvidia closed driver images "/usr/bin/nvidia-modprobe" # https://gitlab.freedesktop.org/polkit/polkit/-/issues/168