From 982cfe76e0b48968706f23267934133bf2a27acd Mon Sep 17 00:00:00 2001 From: Joanna Rutkowska Date: Mon, 3 May 2010 10:51:31 +0000 Subject: [PATCH] UserFaq changed Template VM based on a hardend distro? --- UserFaq.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/UserFaq.md b/UserFaq.md index 4a72487b..8e3e9ae0 100644 --- a/UserFaq.md +++ b/UserFaq.md @@ -73,3 +73,9 @@ No. In order to really built a secure OS, we need to control the whole system, e ### Q: But wouldn't it be cool to use some hardened distro as Dom0? The main idea behind Qubes architecture is to have Dom0 isolated from the outside world, so there is little point in further hardening it via e.g. grsecurity, etc. + +### Q: Perhaps it would make sense then to have a template VM based on some hardened distro? + +Yup, that would make sense indeed. Feel free to build one -- you can use the template\_builder: + +[​http://qubes-os.org/gitweb/?p=mainstream/template-builder.git;a=tree](http://qubes-os.org/gitweb/?p=mainstream/template-builder.git;a=tree)