Shared Folder does not work with Kicksecure

[Patrick]

/usr/lib/security-misc/permission-lockdown runs:

chmod o-rwx /home/user

chmod others (o) remove (-) permissions:

• read (r)
• write (w)
• execute (x) (linux - Why must a folder be executable? - Super User)

Which is very important for meaningful user separation.

Whonix KVM shared folder needs a cleaner solution. Putting it in user home folder /home/user/shared is unclean. Mentioned here:

[Help Welcome] KVM Development - staying the course

Issue creating shared directory between host and guest reminds me… chmod 777 /home/user/shared isn’t a great. Security issue and usability issue. As per https://chmod-calculator.com/ 777 allow public (i.e. any linux user account including those not having business there on the system) to read, write, execute files from that folder. Is there some more canonical way to set up shared folders with KVM? [1] Under which user is KVM attempting to write to shared folders? [1] Under which group is KV…