On 5/31/21 4:55 PM, Michael Singer wrote:
Dear Qubes community,
I am looking for a really secure way to use Qubes for searching not only a hard
drive for file names, but for text that is in files.
The goal is to avoid an exploit in the searched files leading to a takeover of
the hard drive by malware.
If your app is working on the disk device and the app only has read
access to it, it'll be quite unlikely that the disk device will be changed.
Likewise if you mount the filesystem read-only, and the user running the
app is unable to re-mount, it's also quite unlikely that the disk will
be changed. You could even try to combine both methods (read-only mount
a read-only block device). However not all filesystems work on a
write-protected block device.
You could also try to find a hardware solution setting the drive read-only.
The total size of all my files is too large for me to put them all in one qube
before searching for text in them.
Would it perhaps be possible to mount only a single partition of the hard drive
into a qube, but not with write permissions, only read permissions?
I would do the search on command line, using "grep" for plain text files,
"pdfgrep" for PDFs, and something for table files, databases, etc.
Is my idea feasible? And how secure would it be?
Best regards
Michael Singer
--
You received this message because you are subscribed to the Google Groups
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/qubes-users/c2f3b92e-6e55-1f8e-52ea-a6d7b23a300e%40rz.uni-regensburg.de.
