does not cover /usr/local/etc

[adrelanos]

Whonix makes extensive use of /usr/local/etc (/usr/local is stored in /rw). (I find that folder closer to FHS than inventing /rw/config.)

[tasket]

I think you're saying Whonix needs this whitelisted by default?

[adrelanos]

No. While some Whonix packages parse that folder by default, nothing is using it by default. Only users could put configuration files there if they don't want to add them in TemplateVM. Files there should be seen as potential malware hooks unless somehow (I don't fully understand all yet) whitelisted by the user.

[tasket]

According to the threat model (malware being added to /rw in template-based appvm) we're really talking about /rw/usrlocal which is one of the three /rw dirs that are sanitized by default.

[adrelanos]

Alright, therefore invalid bug report.