From 40c64a0dd2a27a088f437ade7772d5b4918b5e99 Mon Sep 17 00:00:00 2001 From: Andrew David Wong Date: Sat, 29 Dec 2018 17:32:42 -0600 Subject: [PATCH] Add explicit security warning about ansible-qubes --- about/faq.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/about/faq.md b/about/faq.md index 6d19084b..cffb36aa 100644 --- a/about/faq.md +++ b/about/faq.md @@ -586,5 +586,6 @@ See the Heads project [[1]](https://trmm.net/Heads) [[2]](http://osresearch.net/ ### Is there a way to automate tasks for continuous integration or DevOps? Yes, Qubes natively supports automation via [Salt (SaltStack)](/doc/salt/). -There is also the unofficial [ansible-qubes toolkit](https://github.com/Rudd-O/ansible-qubes) (which has not been reviewed or endorsed by the Qubes team). +There is also the unofficial [ansible-qubes toolkit](https://github.com/Rudd-O/ansible-qubes). +(**Warning:** Since this is an external project that has not been reviewed or endorsed by the Qubes team, [allowing it to manage dom0 may be a security risk](/doc/security-guidelines/#dom0-precautions).)