Skip to content

Commit

Permalink
tools/qvm-start-daemon: reduce required permissions to sys-gui itself
Browse files Browse the repository at this point in the history
Do not require permission to list sys-gui itself just to get keyboard
layout. Listing itself is not sensitive (sys-gui knows it exists), but
it will make other tools request its properties, which may not be
desirable.
  • Loading branch information
marmarek committed Jun 16, 2020
1 parent b145395 commit 9d6b725
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion qubesadmin/tools/qvm_start_daemon.py
Original file line number Diff line number Diff line change
Expand Up @@ -508,7 +508,7 @@ def main(args=None):
if args.watch and 'guivm-gui-agent' in enabled_services:
args.set_keyboard_layout = True
if args.set_keyboard_layout or os.path.exists('/etc/qubes-release'):
guivm = args.app.domains[args.app.local_name]
guivm = args.app.domains.get_blind(args.app.local_name)
set_keyboard_layout(guivm)
launcher = DAEMONLauncher(args.app)
if args.watch:
Expand Down

0 comments on commit 9d6b725

Please sign in to comment.