Qubes-VM-hardening icon indicating copy to clipboard operation
Qubes-VM-hardening copied to clipboard

Published 20 hours ago • verified publisher icon tasket

Configurable sequence of execution

Open tasket opened this issue 7 years ago • 0 comments
trafficstars

Current sequence goes like:

  1. Checksums
  2. Quarantine /rw dirs a. Whitelist
  3. Deploy files
  4. Set immutable /home files

An administrator may find a different sequence useful, for example running Deploy before Checksums to avoid error conditions when attacks on some files are considered likely.

tasket avatar Mar 30 '18 02:03 tasket