From 08db1c3d88e0cb7a894743afcc68eed08e2b9387 Mon Sep 17 00:00:00 2001 From: Joanna Rutkowska Date: Wed, 28 May 2014 09:35:51 +0000 Subject: [PATCH] SecurityGuidelines changed Thunar is the file manager for Xfce, not KDE --- SecurityGuidelines.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SecurityGuidelines.md b/SecurityGuidelines.md index d9ffd201..ae8611b0 100644 --- a/SecurityGuidelines.md +++ b/SecurityGuidelines.md @@ -118,4 +118,4 @@ controller in the "Available" list. Move it to the "Selected" list. This will cause your new **USBVM** to automatically start when the system starts up. So that in case you forgot to start it and then accidentally plugged a USB stick (or your colleague at work did it while you were at lunch), **it won't compromise the Dom0**. -**10.** Do not use any file managers in dom0. Some file managers (such as the Thunar File Manager, which is pre-installed by default in the KDE version of dom0) list loop devices used by running VMs. When one of these devices is selected in the file manager, the loop device is mounted to dom0, effectively transferring the contents of the home directory of an untrusted AppVM to dom0. See: [​this email](https://groups.google.com/d/msg/qubes-users/_tkjmBa9m9w/9BbKh94PVtcJ). +**10.** Do not use any file managers in dom0. Some file managers (such as the Thunar File Manager, which is pre-installed by default in the Xfce4 version of dom0) list loop devices used by running VMs. When one of these devices is selected in the file manager, the loop device is mounted to dom0, effectively transferring the contents of the home directory of an untrusted AppVM to dom0. See: [​this email](https://groups.google.com/d/msg/qubes-users/_tkjmBa9m9w/9BbKh94PVtcJ).