From 50d48c1f13fb65ced03712d5a34653906b8db783 Mon Sep 17 00:00:00 2001 From: Netcarver Date: Tue, 14 Feb 2023 11:23:44 +0000 Subject: Prevent access to LUKS keyfile --- etc/inc/disable-common.inc | 3 +++ 1 file changed, 3 insertions(+) (limited to 'etc') diff --git a/etc/inc/disable-common.inc b/etc/inc/disable-common.inc index 03daaa9a6..81f417232 100644 --- a/etc/inc/disable-common.inc +++ b/etc/inc/disable-common.inc @@ -450,6 +450,9 @@ blacklist ${HOME}/.vaults blacklist /run/timeshift blacklist /var/backup +# dm-crypt / LUKS +blacklist /crypto_keyfile.bin + # Remove environment variables with auth tokens. # Note however that the sandbox might still have access to the # files where these variables are set. -- cgit v1.2.3-70-g09d2