From 2602af7bc110c464647ca0259f00a0848b8e03d3 Mon Sep 17 00:00:00 2001
From: mossy-nw <34462023+mossy-nw@users.noreply.github.com>
Date: Fri, 19 Jan 2018 13:21:10 +0000
Subject: [PATCH] Update split-gpg.md

---
 security/split-gpg.md | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/security/split-gpg.md b/security/split-gpg.md
index 815308e8..f519ec27 100644
--- a/security/split-gpg.md
+++ b/security/split-gpg.md
@@ -227,6 +227,21 @@ displayed to accept this.
 
 <br />
 
+Qubes 4.0
+---------
+New qrexec policies in Qubes R4.0 by default require the user to enter the name 
+of the domain containing GPG keys each time it is accessed.  To improve usability 
+for Thunderbird+Enigmail, in `dom0` place the following line at the top of the file 
+`/etc/qubes-rpc/policy/qubes.Gpg`:
+
+```
+work-email  work-gpg  allow
+```
+where `work-email` is the Thunderbird+Enigmail AppVM and `work-gpg` contains 
+your GPG keys.
+
+<br />
+
 Advanced: Using Split GPG with Subkeys
 --------------------------------------
 Users with particularly high security requirements may wish to use Split