Specified that /etc/qubes-rpc/policy/qubes.UpdatesProxy is on dom0

Modified "Technical Details (R4.0) to specify that /etc/qubes-rpc/policy/qubes.UpdatesProxy is on dom0 not the TemplateVM
This commit is contained in:
straussmaus 2018-10-31 03:51:06 +00:00 committed by GitHub
parent 0701b55d58
commit 2af81d9e7d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -267,7 +267,7 @@ And in both cases defaults listed above are applied if the service is not explic
### Technical details (R4.0) ### Technical details (R4.0)
Instead of using a network connection like in R3.2, R4.0 uses RPC/qrexec. Instead of using a network connection like in R3.2, R4.0 uses RPC/qrexec.
The proxy is configured in qrexec policy: `/etc/qubes-rpc/policy/qubes.UpdatesProxy`. The proxy is configured in qrexec policy on dom0: `/etc/qubes-rpc/policy/qubes.UpdatesProxy`.
By default this is set to sys-net and/or sys-whonix, depending on firstboot choices. By default this is set to sys-net and/or sys-whonix, depending on firstboot choices.
This new design allows for templates to be updated even when they are not connected to any netvm. This new design allows for templates to be updated even when they are not connected to any netvm.