Git-Mirrors/qubes-doc
1
0
Fork 0
mirror of https://github.com/QubesOS/qubes-doc.git synced 2025-05-07 01:05:00 -04:00
Code Issues Projects Releases Packages Wiki Activity

Prefer well defined "disposable" over "throwaway"

Browse source
This commit is contained in:
Jean-Philippe Ouellet 2016-12-24 13:39:23 -05:00
parent 889578f18a
commit cc8aeead5a
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
services/qrexec3.md
View file

@ -155,7 +155,7 @@ Be very careful when coding and adding a new rpc service. Unless the
offered functionality equals full control over the target (it is the case offered functionality equals full control over the target (it is the case
with e.g. `qubes.VMShell` action), any vulnerability in a rpc server can with e.g. `qubes.VMShell` action), any vulnerability in a rpc server can
be fatal to Qubes security. On the other hand, this mechanism allows to be fatal to Qubes security. On the other hand, this mechanism allows to
delegate processing of untrusted input to less privileged (or throwaway) delegate processing of untrusted input to less privileged (or disposable)
AppVMs, thus wise usage of it increases security. AppVMs, thus wise usage of it increases security.
### Extra keywords available in Qubes 4.0 and later ### Extra keywords available in Qubes 4.0 and later