Rescope clipboard permission to sd-app

freedomofpress · Apr 21, 2020 · d23dd8c · d23dd8c
1 parent 3951038
commit d23dd8c
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 5 deletions.
diff --git a/dom0/sd-dom0-qvm-rpc.sls b/dom0/sd-dom0-qvm-rpc.sls
@@ -17,8 +17,8 @@ dom0-rpc-qubes.ClipboardPaste:
     - marker_start: "### BEGIN securedrop-workstation ###"
     - marker_end: "### END securedrop-workstation ###"
     - content: |
-        @tag:sd-send-clipboard @tag:sd-workstation ask
-        @tag:sd-workstation @tag:sd-receive-clipboard ask
+        @tag:sd-send-app-clipboard sd-app ask
+        sd-app @tag:sd-receive-app-clipboard ask
         @anyvm @tag:sd-workstation deny
         @tag:sd-workstation @anyvm deny
 dom0-rpc-qubes.FeaturesRequest:

diff --git a/scripts/remove-tags b/scripts/remove-tags
@@ -7,7 +7,7 @@ import qubesadmin
 
 q = qubesadmin.Qubes()
 
-TAGS_TO_REMOVE = ["sd-send-clipboard", "sd-receive-clipboard", "sd-receive-logs"]
+TAGS_TO_REMOVE = ["sd-send-app-clipboard", "sd-receive-app-clipboard", "sd-receive-logs"]
 
 
 def main():

diff --git a/tests/vars/qubes-rpc.yml b/tests/vars/qubes-rpc.yml
@@ -1,8 +1,8 @@
 - policy: qubes.ClipboardPaste
   starts_with: |-
     ### BEGIN securedrop-workstation ###
-    @tag:sd-send-clipboard @tag:sd-workstation ask
-    @tag:sd-workstation @tag:sd-receive-clipboard ask
+    @tag:sd-send-app-clipboard sd-app ask
+    sd-app @tag:sd-receive-app-clipboard ask
     @anyvm @tag:sd-workstation deny
     @tag:sd-workstation @anyvm deny
     ### END securedrop-workstation ###