qusal/salt/sys-cacher/files/admin/policy/default.policy
2024-01-12 18:34:04 +01:00

16 lines
843 B
Plaintext

# SPDX-FileCopyrightText: 2023 Benjamin Grande M. S. <ben.grande.b@gmail.com>
#
# SPDX-License-Identifier: AGPL-3.0-or-later
## Do not modify this file, create a new policy with with a lower number in the
## file name instead. For example `30-user.policy`.
qubes.OpenURL * {{ sls_path }} @default allow target={{ sls_path }}-browser
qubes.OpenURL * {{ sls_path }} @anyvm deny
qubes.ConnectTCP +8082 {{ sls_path }}-browser @default allow target={{ sls_path }}
qubes.ConnectTCP * {{ sls_path }}-browser @anyvm deny
qubes.UpdatesProxy * @tag:whonix-updatevm @default allow target=sys-whonix
qubes.UpdatesProxy * @tag:whonix-updatevm @anyvm deny
qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @default allow target={{ sls_path }}
qubes.UpdatesProxy * @tag:updatevm-{{ sls_path }} @anyvm deny
## vim:ft=qrexecpolicy