From fb13227ee5ec8a6e9df2dc2521cb12badd03919f Mon Sep 17 00:00:00 2001 From: Andrew David Wong Date: Sat, 19 May 2018 00:45:23 -0500 Subject: [PATCH] Remove section on cooperative covert channels (#651) This topic is covered more clearly and in more detail here: https://www.qubes-os.org/doc/data-leaks/ --- system/security-critical-code.md | 10 ---------- 1 file changed, 10 deletions(-) diff --git a/system/security-critical-code.md b/system/security-critical-code.md index cabcf945..9c6ccab6 100644 --- a/system/security-critical-code.md +++ b/system/security-critical-code.md @@ -75,16 +75,6 @@ In practice, we trust the software provided by the [Fedora Project]. This software is signed by Fedora distribution keys, so it is also critical that the tools used in domains for software updates (`dnf` and `rpm`) are trustworthy. -Cooperative Covert Channels Between Domains -------------------------------------------- - -Qubes does not attempt to eliminate all possible *cooperative* covert channels between domains, i.e. such channels that could be established between two *compromised* domains. -We don't believe this is possible to achieve on x86 hardware, and we also doubt it makes any sense in practice for most users. -After all, if the two domains are compromised, then it's already (almost) all lost anyway. - -For more on this topic, see [Understanding and Preventing Data Leaks]. - - [Qubes Security Goals]: /security/goals/ [Fedora Project]: https://getfedora.org/ [Understanding and Preventing Data Leaks]: /doc/data-leaks/