On 06/20/2017 01:06 PM, [email protected] wrote:
Or is this a false positive?
If you 'man xl' you'll see its a Xen command (Qubes runs under Xen). Its included in my Fedora template so I don't think there is a problem.
Also don't know how a root would have gotten into your /template/... that seems extremely hard unless you've been installing unsigned/untrusted software in there manually.
If you're really paranoid, you could attach the root.img of the template to an appVM based on a different template, then do a SHA sum on 'xl' and related xenlight libs. You should be able to find sums for (same versions of) those files at fedora's site.
-- Chris Laprise, [email protected] https://twitter.com/ttaskett PGP: BEE2 20C5 356E 764A 73EB 4AB3 1DC4 D106 F07F 1886 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/8c429f91-1537-ece3-8d3d-67552fc45ea5%40openmailbox.org. For more options, visit https://groups.google.com/d/optout.
