Warn users when running inside a VM
We tell users, when running inside a VM, that they are implicitly trusting both the VM software and the host OS; the warning message points to a dedicated documentation page. This is needed to avoid creating a false sense of security, which is often worse than no security and a clear sense of it.
The detection is done at boot time with
virt-what. Detection
results are stored in /var/lib/live/detected-virtual-machine and
later used by a desktop notification system.
- config/chroot local-includes/etc/init.d/tails-detect-virtualization
- config/chroot local-includes/etc/xdg/autostart/virt-notify.desktop
- config/chroot local-includes/usr/local/bin/tails-virt-notify-user
A bit more work is left to do.