QubesOS/qubes-core-admin-linux
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

qubespolicy: unify calling qrexec service

Browse Source 
Rely on qrexec-client resolving QUBESRPC keyword, same as in case of VM
call. This will allow applying special treatment to such calls, like
calling qubes-rpc-multiplexer directly (avoiding shell), because we have
defined protocol what can be used here.
This commit is contained in:
Marek Marczykowski-Górecki 2018-02-19 02:27:32 +01:00
parent fe271c5672
commit 1a01417994
No known key found for this signature in database
GPG Key ID: 063938BA42CFA724
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
qrexec/qrexec-policy
View File

@ -119,7 +119,7 @@ def do_execute(domain, target, user, service_name, process_ident, vm=None):
if isinstance(vm, qubes.qubes.QubesVm): if isinstance(vm, qubes.qubes.QubesVm):
spawn_target_if_necessary(vm) spawn_target_if_necessary(vm)
if target == "dom0": if target == "dom0":
cmd = QUBES_RPC_MULTIPLEXER_PATH + " " + service_name + " " + domain cmd = "QUBESRPC " + service_name + " " + domain
else: else:
cmd = user + ":QUBESRPC "+ service_name + " " + domain cmd = user + ":QUBESRPC "+ service_name + " " + domain
# stderr should be logged in source/target VM # stderr should be logged in source/target VM