Qubes-Whonix whonixcheck sanity test for 'prevent dom0 telling Qubes-Whonix VMs the time'

[phabricator-migrator]

Information

ID: 398
PHID: PHID-TASK-lpuaf37yukhobw4izkj5
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

When prevent dom0 telling Qubes-Whonix VMs the time T397 is implemented, #whonixcheck should add a sanity test to see if that won’t break over time.

Implementation:

• #qubes-whonix_12’s /etc/qubes-rpc/qubes.SetDateTime[.anondist] can forward everything dom0 is [not] telling to a file.
• From there #whonixcheck can check if that file exists. If it exists, then T397 is either broken or not yet implemented.

Comments

---

Patrick

2015-08-18 01:48:51 UTC

/etc/qubes-rpc/qubes.SetDateTime.anondist: dom0 should not tell us its time. But if it does, create a file /var/run/qubes-whonix/qubes.SetDateTime so whonixcheck could warn in case this file exists. - https://phabricator.whonix.org/T398:
/etc/qubes-rpc/qubes.SetDateTime.anondist: dom0 should not tell us it… · Whonix/qubes-whonix@300d09b · GitHub

---

Patrick

2015-08-18 02:01:02 UTC

Added an info level message when running with --verbose if dom0 is telling us the time. As long as https://phabricator.whonix.org/T397 is unsolved. - https://phabricator.whonix.org/T398:
https://github.com/Whonix/whonixcheck/commit/0019e00e28ef85cdd95937d4d1e134335a03af18