From dce008bc2746ced9fe7b092b76d09f63e9e727ca Mon Sep 17 00:00:00 2001 From: tt-why Date: Tue, 30 Nov 2021 14:28:03 +0000 Subject: [PATCH] Update U2F proxy doc when having non standard sys-usb qubes name --- user/security-in-qubes/u2f-proxy.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/user/security-in-qubes/u2f-proxy.md b/user/security-in-qubes/u2f-proxy.md index 2304c4b3..942c163a 100644 --- a/user/security-in-qubes/u2f-proxy.md +++ b/user/security-in-qubes/u2f-proxy.md @@ -124,6 +124,8 @@ systemctl disable qubes-u2fproxy@sys-usb.service Replace `USB_QUBE` with the actual USB qube name. +Do not forget to change the sys-usb qube name in the policy `/etc/qubes-rpc/policy/u2f.Authenticate`. + ## Template and browser support The large number of possible combinations of template (Fedora 27, 28; Debian 8, 9) and browser (multiple Google Chrome versions, multiple Chromium versions, multiple Firefox versions) made it impractical for us to test every combination that users are likely to attempt with the Qubes U2F Proxy.