Qubes Whonix-Gateway should have persistent /var/lib/tor to make entry guards persistent like non-Qubes Whonix Gateway

[qubesuser]

Currently Whonix-Gateway VMs have volatile /var/lib/tor, which means that entry guards are not saved across reboots, which is potentially dangerous since persisting them mitigates against attackers who set up malicious entry guards.

This behavior also differs from the non-Qubes Whonix Gateway, which is surprising for users who move to Qubes.

Actually, having the whole /var being persistent on all Qubes VMs seems the most reasonable approach, since being persistent, mutable and per-machine is pretty much the whole point of /var, but that's a separate consideration and there might be reasons I'm missing to do it like Qubes does now.

[adrelanos]

Currently Whonix-Gateway VMs have volatile /var/lib/tor, which means that entry guards are not saved across reboots, which is potentially dangerous since persisting them mitigates against attackers who set up malicious entry guards.

This behavior also differs from the non-Qubes Whonix Gateway, which is surprising for users who move to Qubes.

Confirmed. Agreed.

Actually, having the whole /var being persistent on all Qubes VMs seems the most reasonable approach, since being persistent, mutable and per-machine is pretty much the whole point of /var, but that's a separate consideration and there might be reasons I'm missing to do it like Qubes does now.

That should be discussed elsewhere.

[adrelanos]

Currently Whonix-Gateway VMs have volatile /var/lib/tor, which means that entry guards are not saved across reboots, which is potentially dangerous since persisting them mitigates against attackers who set up malicious entry guards.

This behavior also differs from the non-Qubes Whonix Gateway, which is surprising for users who move to Qubes.

Confirmed. Agreed.

Actually, having the whole /var being persistent on all Qubes VMs seems the most reasonable approach, since being persistent, mutable and per-machine is pretty much the whole point of /var, but that's a separate consideration and there might be reasons I'm missing to do it like Qubes does now.

That should be discussed elsewhere.

[adrelanos]

Fixed with the above commit. Will appear in Whonix 12.

[adrelanos]

Fixed with the above commit. Will appear in Whonix 12.