Git-Mirrors/qusal
1
0
Fork 0
mirror of https://github.com/ben-grande/qusal.git synced 2025-08-09 14:42:12 -04:00
Code Issues Projects Releases Packages Wiki Activity

feat: default to disposable netvm

Browse source 
- Default sys-net and sys-firewall to disposable;
- Set global and per vm preferences by starting the qubes or shutting
  down them when necessary; and
- Less manual steps remaining for the user: just rename the net qube, as
  it can only be done via Qubes Manager.
This commit is contained in:
Ben Grande 2024-01-04 21:59:15 +01:00
parent 8059435b57
commit d88a114db6
No known key found for this signature in database
GPG key ID: 00C64E14F51F9E56
10 changed files with 186 additions and 59 deletions
Download patch file Download diff file Expand all files Collapse all files

11
salt/sys-net/files/admin/policy/default-disp.policy Normal file
View file

@ -0,0 +1,11 @@
# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later
## Do not modify this file, create a new policy with with a lower number in the
## file name instead. For example `30-user.policy`.
qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix
qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny
qubes.UpdatesProxy * @type:TemplateVM @default allow target=disp-{{ sls_path }}
qubes.UpdatesProxy * @type:TemplateVM @anyvm deny
## vim:ft=qrexecpolicy

2
salt/sys-net/files/admin/policy/default.policy
View file

@ -6,6 +6,6 @@
## file name instead. For example `30-user.policy`.
qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix
qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny
qubes.UpdatesProxy * @type:TemplateVM @default allow target=disp-{{ sls_path }}
qubes.UpdatesProxy * @type:TemplateVM @default allow target={{ sls_path }}
qubes.UpdatesProxy * @type:TemplateVM @anyvm deny
## vim:ft=qrexecpolicy