Add documentation for policy internals

Describes changes in QubesOS/qubes-core-qrexec#30.
This commit is contained in:
Paweł Marczewski 2020-03-02 14:21:45 +01:00
parent 0a14eb831a
commit 1aacec4ab9
No known key found for this signature in database
GPG key ID: DE42EE9B14F96465
2 changed files with 31 additions and 6 deletions

View file

@ -205,6 +205,12 @@ Other Qrexec services installed by default:
`qubes.VMExec+ls+--a+-2Fhome-2Fuser`
- `qubes.VMExecGUI` - a variant of `qubes.VMExec` that waits for full VM
startup first
Services called in GuiVM:
- `policy.Ask`, `policy.Notify` - confirmation prompt and notifications for
Qubes RPC calls, see [qrexec-policy implementation](/doc/qrexec-internals/#qrexec-policy-implementation)
for a detailed description.
Currently Qubes still calls few tools in VM directly, not using service
abstraction. This will change in the future. Those tools are: