Qubes/core-admin-client
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

tools/qvm-start-daemon: reduce required permissions to sys-gui itself

Browse Source 
Do not require permission to list sys-gui itself just to get keyboard
layout. Listing itself is not sensitive (sys-gui knows it exists), but
it will make other tools request its properties, which may not be
desirable.
This commit is contained in:
Marek Marczykowski-Górecki 2020-06-16 15:50:03 +02:00
parent b1453953f9
commit 9d6b7257c4
No known key found for this signature in database
GPG Key ID: 063938BA42CFA724
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
qubesadmin/tools/qvm_start_daemon.py
View File

@ -508,7 +508,7 @@ def main(args=None):
if args.watch and 'guivm-gui-agent' in enabled_services: if args.watch and 'guivm-gui-agent' in enabled_services:
args.set_keyboard_layout = True args.set_keyboard_layout = True
if args.set_keyboard_layout or os.path.exists('/etc/qubes-release'): if args.set_keyboard_layout or os.path.exists('/etc/qubes-release'):
guivm = args.app.domains[args.app.local_name] guivm = args.app.domains.get_blind(args.app.local_name)
set_keyboard_layout(guivm) set_keyboard_layout(guivm)
launcher = DAEMONLauncher(args.app) launcher = DAEMONLauncher(args.app)
if args.watch: if args.watch: