[prev in list] [next in list] [prev in thread] [next in thread]
List: qubes-devel
Subject: Re: [qubes-devel] is intent to automatically remove empty subdirs in QubesIncoming acceptable?
From: Andrew Clausen <andrew.p.clausen () gmail ! com>
Date: 2017-02-28 8:39:45
Message-ID: CAAXZBW+pBXTx+W5G9WdzGxpzs6Y37NHc18uMpXTy7Pfii1hpkQ () mail ! gmail ! com
[Download RAW message or body]
Hi Oleg,
I think you would want to use srm since rm would still leave traces on the
filesystem.
Kind regards,
Andrew
On 27 February 2017 at 22:23, Oleg Artemiev <grey.olli@gmail.com> wrote:
> Hello.
>
> From anti-forensic point of view empty dir in some app-VM in
> QubesIncoming (except dom0) leaking fact of presence a VM some time
> ago.
>
> All we need is add command like "rm /home/user/QubesIncoming/*/* -p
> --ignore-fail-on-non-empty" into default VM startup script for all
> linux based template VMs.
>
> I could provide a simplest pull requiest if this change will be
> accepted (good if you point me to a repo where it should go). Should
> I?
>
> --
> Bye.Olli.
> gpg --search-keys grey_olli , use key w/ fingerprint below:
> Key fingerprint = 9901 6808 768C 8B89 544C 9BE0 49F9 5A46 2B98 147E
> Blog keys (the blog is mostly in Russian): http://grey-olli.livejournal.
> com/tag/
>
> --
> You received this message because you are subscribed to the Google Groups
> "qubes-devel" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to qubes-devel+unsubscribe@googlegroups.com.
> To post to this group, send email to qubes-devel@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/
> msgid/qubes-devel/CABunX6Obbd57-GZHGBY6C_TcM--dhhk7ziAzK3Y9R%3D%3DgzaK9Pw%
> 40mail.gmail.com.
> For more options, visit https://groups.google.com/d/optout.
>
--
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/CAAXZBW%2BpBXTx%2BW5G9WdzGxpzs6Y37NHc18uMpXTy7Pfii1hpkQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.
[Attachment #3 (text/html)]
<div dir="ltr"><div><div><div>Hi Oleg,<br><br></div>I think you would want to use srm \
since rm would still leave traces on the filesystem.<br><br></div>Kind \
regards,<br></div>Andrew<br></div><div class="gmail_extra"><br><div \
class="gmail_quote">On 27 February 2017 at 22:23, Oleg Artemiev <span \
dir="ltr"><<a href="mailto:grey.olli@gmail.com" \
target="_blank">grey.olli@gmail.com</a>></span> wrote:<br><blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex">Hello.<br> <br>
From anti-forensic point of view empty dir in some app-VM in<br>
QubesIncoming (except dom0) leaking fact of presence a VM some time<br>
ago.<br>
<br>
All we need is add command like "rm /home/user/QubesIncoming/*/* -p<br>
--ignore-fail-on-non-empty" into default VM startup script for all<br>
linux based template VMs.<br>
<br>
I could provide a simplest pull requiest if this change will be<br>
accepted (good if you point me to a repo where it should go). Should<br>
I?<br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Bye.Olli.<br>
gpg --search-keys grey_olli , use key w/ fingerprint below:<br>
Key fingerprint = 9901 6808 768C 8B89 544C 9BE0 49F9 5A46 2B98 147E<br>
Blog keys (the blog is mostly in Russian): <a \
href="http://grey-olli.livejournal.com/tag/" rel="noreferrer" \
target="_blank">http://grey-olli.livejournal.<wbr>com/tag/</a><br> <br>
--<br>
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group.<br> To unsubscribe from this group and stop receiving \
emails from it, send an email to <a \
href="mailto:qubes-devel%2Bunsubscribe@googlegroups.com">qubes-devel+unsubscribe@<wbr>googlegroups.com</a>.<br>
To post to this group, send email to <a \
href="mailto:qubes-devel@googlegroups.com">qubes-devel@googlegroups.com</a>.<br> To \
view this discussion on the web visit <a \
href="https://groups.google.com/d/msgid/qubes-devel/CABunX6Obbd57-GZHGBY6C_TcM--dhhk7ziAzK3Y9R%3D%3DgzaK9Pw%40mail.gmail.com" \
rel="noreferrer" target="_blank">https://groups.google.com/d/<wbr>msgid/qubes-devel/<w \
br>CABunX6Obbd57-GZHGBY6C_TcM--<wbr>dhhk7ziAzK3Y9R%3D%3DgzaK9Pw%<wbr>40mail.gmail.com</a>.<br>
For more options, visit <a href="https://groups.google.com/d/optout" \
rel="noreferrer" target="_blank">https://groups.google.com/d/<wbr>optout</a>.<br> \
</font></span></blockquote></div><br></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group.<br /> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:qubes-devel+unsubscribe@googlegroups.com">qubes-devel+unsubscribe@googlegroups.com</a>.<br \
/> To post to this group, send email to <a \
href="mailto:qubes-devel@googlegroups.com">qubes-devel@googlegroups.com</a>.<br /> To \
view this discussion on the web visit <a \
href="https://groups.google.com/d/msgid/qubes-devel/CAAXZBW%2BpBXTx%2BW5G9WdzGxpzs6Y37 \
NHc18uMpXTy7Pfii1hpkQ%40mail.gmail.com?utm_medium=email&utm_source=footer">https://gro \
ups.google.com/d/msgid/qubes-devel/CAAXZBW%2BpBXTx%2BW5G9WdzGxpzs6Y37NHc18uMpXTy7Pfii1hpkQ%40mail.gmail.com</a>.<br \
/> For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic