Re: [qubes-devel] Convert to trusted LibreOffice file

2017-11-18 Thread Vít Šesták
Running in DispVM can prevent some class of attack that extracts data using techniques like path traversal, XXE (hmm, …) or other attacks below RCE. Regards, Vít Šesták 'v6ak' On Wednesday, November 15, 2017 at 12:07:21 AM UTC+1, Marek Marczykowski-Górecki wrote: > > -BEGIN PGP SIGNED MESSA

Re: [qubes-devel] Convert to trusted LibreOffice file

2017-11-15 Thread Raphaël Vinot
Hi all, On 11/15/2017 12:07 AM, Marek Marczykowski-Górecki wrote: > On Tue, Nov 14, 2017 at 12:37:27PM -0500, Michael Carbone wrote: >> Hi folks, > >> A colleague at CIRCL recently released ODFCleaner: > >> https://github.com/CIRCL/ODFCleaner > >> Could be worth exploring integration as an addi

Re: [qubes-devel] Convert to trusted LibreOffice file

2017-11-15 Thread Andrew Clausen
Hi all, On 14 November 2017 at 23:07, Marek Marczykowski-Górecki < marma...@invisiblethingslab.com> wrote: > Well, this indeed could be useful. Also, running such tool in DispVM > makes sense. But the security model here is very different than PDF > converter. In PDF converter we have two parts:

Re: [qubes-devel] Convert to trusted LibreOffice file

2017-11-14 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Tue, Nov 14, 2017 at 12:37:27PM -0500, Michael Carbone wrote: > Hi folks, > > A colleague at CIRCL recently released ODFCleaner: > > https://github.com/CIRCL/ODFCleaner > > Could be worth exploring integration as an additional feature similar t

[qubes-devel] Convert to trusted LibreOffice file

2017-11-14 Thread Michael Carbone
Hi folks, A colleague at CIRCL recently released ODFCleaner: https://github.com/CIRCL/ODFCleaner Could be worth exploring integration as an additional feature similar to Convert to trusted PDF. -- Michael Carbone Qubes OS | https://www.qubes-os.org @QubesOS