How Qubes Protects you from (Linux) Dirty Pipe Vulnerability

[deeplow]

Good to know. moved the discussion into its own topic:

Docs: "dom0 vm-auth prompt" and "yubikey auth" instuctions don't in 4.1

Since 4.0 is still supported, is it true that they’re “no-longer-existent qrexec policies”? That is, don’t they still exist in 4.0? I’m afraid that removing that doc content could harm 4.0 users who are still relying on it. Folks who have decided not to upgrade yet are likely to be those who particularly value stability and reliability, so pulling the rug out from under them seems especially bad. I also have to confess that I’m not familiar enough with those qrexec policy changes yet to be abl…