/qubes-issues

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Firefox profile possibly persisting across DispVMs #2200

Closed
andrewdavidwong opened this Issue Jul 26, 2016 · 5 comments

Comments

Assignees
No one assigned
Labels
Projects
None yet
Milestone
  Release 3.1 updates
2 participants
@andrewdavidwong @marmarek
@andrewdavidwong
Member

andrewdavidwong commented Jul 26, 2016

Some users have reported Firefox profile data (e.g., browsing history) persisting between DispVMs:

@andrewdavidwong andrewdavidwong added bug C: core labels Jul 26, 2016

@marmarek marmarek added the P: critical label Aug 5, 2016

@marmarek marmarek added this to the Release 3.0 updates milestone Aug 5, 2016

@marmarek marmarek added P: major and removed P: critical labels Aug 5, 2016

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Aug 5, 2016

Member

Probably caused by problem with volatile.img file permissions.
Member

marmarek commented Aug 5, 2016

Probably caused by problem with volatile.img file permissions.

@marmarek marmarek closed this in marmarek/old-qubes-core-admin@d0ddb3d Aug 7, 2016

marmarek added a commit to marmarek/old-qubes-core-admin that referenced this issue Aug 7, 2016

@marmarek
prepare-volatile-img.sh: create volatile.img group accessible 
Otherwise qvm-create-default-dvm may fail to include it in
saved-cows.tar, which will lead to DispVM being not really disposable.

Fixes QubesOS/qubes-issues#2200
Verified
This commit was signed with a verified signature.
@marmarek marmarek Marek Marczykowski-Górecki
GPG key ID: 063938BA42CFA724 Learn about signing commits
2908992
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Aug 8, 2016

Member

Automated announcement from builder-github

The package qubes-core-dom0-3.2.8-1.fc23 has been pushed to the r3.2 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update
Member

marmarek commented Aug 8, 2016

Automated announcement from builder-github

The package qubes-core-dom0-3.2.8-1.fc23 has been pushed to the r3.2 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

@marmarek marmarek added the r3.2-dom0-cur-test label Aug 8, 2016

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Aug 31, 2016

Member

Automated announcement from builder-github

The package qubes-core-dom0-3.2.8-1.fc23 has been pushed to the r3.2 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update
Member

marmarek commented Aug 31, 2016

Automated announcement from builder-github

The package qubes-core-dom0-3.2.8-1.fc23 has been pushed to the r3.2 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update

@marmarek marmarek added r3.2-dom0-stable and removed r3.2-dom0-cur-test labels Aug 31, 2016

@marmarek marmarek modified the milestones: Release 3.1 updates, Release 3.0 updates Nov 15, 2016

marmarek added a commit to QubesOS/qubes-core-admin that referenced this issue Nov 20, 2016

@marmarek
dispvm: error out on saved-cows.tar creation error 
If it fails - for example because of too restrictive volatile.img
permissions, subsequent DispVM will not be really disposable.
The original permissions issue should be fixed by previous commit, this
one makes sure that such errors will not be ignored.

Fixes QubesOS/qubes-issues#2200

(cherry picked from commit d0ddb3d)
Verified
This commit was signed with a verified signature.
@marmarek marmarek Marek Marczykowski-Górecki
GPG key ID: 063938BA42CFA724 Learn about signing commits
f6c85b3

marmarek added a commit to QubesOS/qubes-core-admin that referenced this issue Nov 20, 2016

@marmarek
prepare-volatile-img.sh: create volatile.img group accessible 
Otherwise qvm-create-default-dvm may fail to include it in
saved-cows.tar, which will lead to DispVM being not really disposable.

Fixes QubesOS/qubes-issues#2200

(cherry picked from commit 2908992)
Verified
This commit was signed with a verified signature.
@marmarek marmarek Marek Marczykowski-Górecki
GPG key ID: 063938BA42CFA724 Learn about signing commits
b1c69e8
@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Nov 20, 2016

Member

Automated announcement from builder-github

The package qubes-core-dom0-3.1.18-1.fc20 has been pushed to the r3.1 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update
Member

marmarek commented Nov 20, 2016

Automated announcement from builder-github

The package qubes-core-dom0-3.1.18-1.fc20 has been pushed to the r3.1 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

@marmarek marmarek added the r3.1-dom0-cur-test label Nov 20, 2016

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Dec 4, 2016

Member

Automated announcement from builder-github

The package qubes-core-dom0-3.1.18-1.fc20 has been pushed to the r3.1 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update
Member

marmarek commented Dec 4, 2016

Automated announcement from builder-github

The package qubes-core-dom0-3.1.18-1.fc20 has been pushed to the r3.1 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update

@marmarek marmarek added r3.1-dom0-stable and removed r3.1-dom0-cur-test labels Dec 4, 2016

@jpouellet jpouellet referenced this issue May 3, 2017

Open

Disposable VM gained persistance! #2792

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment