From 8d7c206cbb71ac1a9eb1c9d759fd648ad2665d60 Mon Sep 17 00:00:00 2001 From: mustard Date: Fri, 19 Sep 2025 02:38:11 +0200 Subject: [PATCH] fix: add additional binary that needs suid for qvm-copy to work --- remove_suid.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/remove_suid.sh b/remove_suid.sh index a10dc56..36cc862 100755 --- a/remove_suid.sh +++ b/remove_suid.sh @@ -20,6 +20,7 @@ whitelist=( # Need to allowlist qrexec binaries to ensure qubes templates (hopefully) don't break, not sure why they're duplicated in /usr/bin and /usr/sbin "/usr/bin/qfile-unpacker" "/usr/sbin/qfile-unpacker" + "/usr/lib/qubes/qfile-unpacker" "/usr/bin/qrexec-client-vm" "/usr/sbin/qrexec-client-vm" "/usr/bin/qrexec-fork-server" @@ -38,7 +39,6 @@ whitelist=( "/usr/sbin/qrexec-policy-graph" "/usr/bin/qrexec-policy-restore" "/usr/sbin/qrexec-policy-restore" - # Required for nvidia closed driver images "/usr/bin/nvidia-modprobe" # https://gitlab.freedesktop.org/polkit/polkit/-/issues/168