allow empty argument only for whonix.SdwdateStatus qrexec call

QubesOS · Feb 15, 2022 · a7797aa · a7797aa
1 parent d238125
commit a7797aa
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/qubes-rpc-policy/80-whonix.policy b/qubes-rpc-policy/80-whonix.policy
@@ -1,9 +1,9 @@
 # service            arg source            target            action params
 
-whonix.SdwdateStatus  *  @tag:anon-gateway @tag:anon-vm      allow autostart=no notify=no
-whonix.SdwdateStatus  *  sys-whonix        @tag:anon-vm      allow autostart=no notify=no
-whonix.SdwdateStatus  *  @anyvm            @default          deny notify=no
-whonix.SdwdateStatus  *  @anyvm            @anyvm            deny
+whonix.SdwdateStatus  +  @tag:anon-gateway @tag:anon-vm      allow autostart=no notify=no
+whonix.SdwdateStatus  +  sys-whonix        @tag:anon-vm      allow autostart=no notify=no
+whonix.SdwdateStatus  +  @anyvm            @default          deny notify=no
+whonix.SdwdateStatus  +  @anyvm            @anyvm            deny
 
 whonix.NewStatus      *  @tag:anon-vm      @tag:anon-gateway allow autostart=no
 whonix.NewStatus      *  @tag:anon-vm      sys-whonix        allow autostart=no