How Qubes Protects you from (Linux) Dirty Pipe Vulnerability

[fiftyfourthparallel]

@deeplow

Nothing prevents you from “Replacing passwordless root access with Dom0 user prompt”.

Actually, regarding that:

@fiftyfourthparallel

Adding Dom0 “VMAuth” service:

[root@dom0 /]# echo "/usr/bin/echo 1" >/etc/qubes-rpc/qubes.VMAuth
[root@dom0 /]# echo "@anyvm dom0 ask,default_target=dom0" \
>/etc/qubes-rpc/policy/qubes.VMAuth
(Note: any VMs you would like still to have passwordless root access (e.g. Templates) can be specified in the second file with “<vmname> dom0 allow”)

The /etc/qubes-rpc/qubes.VMAuth and /etc/qubes-rpc/policy/qubes.VMAuth mentioned here no longer exist in R4.1, and creating it doesn’t solve the issue as the system no longer uses it.