From 908d2a1d616a00462dbda4776aa51ee67727b2ad Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Mon, 18 Apr 2016 02:33:11 +1000 Subject: [PATCH 1/4] disabled VeraCrypt access --- etc/disable-common.inc | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/etc/disable-common.inc b/etc/disable-common.inc index b1133f28f..2c8773b00 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc @@ -26,6 +26,14 @@ blacklist ${HOME}/.VirtualBox blacklist ${HOME}/VirtualBox VMs blacklist ${HOME}/.config/VirtualBox +# VeraCrypt +blacklist /usr/bin/veracrypt +blacklist /usr/bin/veracrypt-uninstall.sh +blacklist /usr/share/veracrypt +blacklist /usr/share/applications/veracrypt.* +blacklist /usr/share/pixmaps/veracrypt.* +blacklist ${HOME}/.VeraCrypt + # var blacklist /var/spool/cron blacklist /var/spool/anacron From d5ba1843daa3dd8b8a73881c252d18eb764784b8 Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Mon, 18 Apr 2016 02:35:10 +1000 Subject: [PATCH 2/4] added VeraCrypt --- README | 1 + 1 file changed, 1 insertion(+) diff --git a/README b/README index ade4b4258..1fdd0e45b 100644 --- a/README +++ b/README @@ -28,6 +28,7 @@ Fred-Barclay (https://github.com/Fred-Barclay) - split Icedove and Thunderbird profiles - added 0ad profile - fixed version for deb packages + - blacklisted VeraCrypt avoidr (https://github.com/avoidr) - whitelist fix - recently-used.xbel fix From f7894327672b9e54f237ffa377ebd019a76334a2 Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Mon, 18 Apr 2016 03:19:54 +1000 Subject: [PATCH 3/4] Removed thunderbird todo --- todo | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/todo b/todo index da732be9f..f23b4b13d 100644 --- a/todo +++ b/todo @@ -74,11 +74,9 @@ CapEff: 0000000000000000 CapBnd: 0000003fffffffff CapAmb: 0000000000000000 -11. cleanup thunderbird profile - disable-common was commented out - -12. check seccomp on Docker: https://docs.docker.com/engine/security/seccomp/ +11. check seccomp on Docker: https://docs.docker.com/engine/security/seccomp/ Seccomp lists: https://github.com/torvalds/linux/blob/1e75a9f34a5ed5902707fb74b468356c55142b71/arch/x86/entry/syscalls/syscall_64.tbl https://github.com/torvalds/linux/blob/1e75a9f34a5ed5902707fb74b468356c55142b71/arch/x86/entry/syscalls/syscall_32.tbl -13. check for --chroot why .config/pulse dir is not created +12. check for --chroot why .config/pulse dir is not created From 9bb31411516cb6df99f3ebbf31a4fb17b8b56f77 Mon Sep 17 00:00:00 2001 From: Fred-Barclay Date: Mon, 18 Apr 2016 05:21:41 +1000 Subject: [PATCH 4/4] Fixed path --- etc/disable-common.inc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/disable-common.inc b/etc/disable-common.inc index 2c8773b00..4d05ba783 100644 --- a/etc/disable-common.inc +++ b/etc/disable-common.inc @@ -27,8 +27,8 @@ blacklist ${HOME}/VirtualBox VMs blacklist ${HOME}/.config/VirtualBox # VeraCrypt -blacklist /usr/bin/veracrypt -blacklist /usr/bin/veracrypt-uninstall.sh +blacklist ${PATH}/veracrypt +blacklist ${PATH}/veracrypt-uninstall.sh blacklist /usr/share/veracrypt blacklist /usr/share/applications/veracrypt.* blacklist /usr/share/pixmaps/veracrypt.*