subgraph way for filtering X access

[Oleg Artemiev]

Hi

It could be nice to have abilities for dom0 -> domU copypaste and
DomU->Dom0 copypaste.
Though such a copypaste is considered as insecure and forbidden
currently. Could it be implemented similarry to subgraph way of X<->X
proxying?

I mean assign some specific restricted environment you may copy/paste
this way. Requirement to switch workflow is still annoying. I've
already got a habbit to use Ctrl_Shift-C + Ctrl_Shift-V, but once I
need copy info from dom0 to domU and back I've to switch to files via
qrexec .

Subj ?

BTW: I've read a review that Qubes is about to have subgraph as one of
template VMs. That sounds promising. :) Is this in this year plans or
for far future?

--
Bye.Olli.
gpg --search-keys grey_olli , use key w/ fingerprint below:
Key fingerprint = 9901 6808 768C 8B89 544C 9BE0 49F9 5A46 2B98 147E
Blog keys (the blog is mostly in Russian): http://grey-olli.livejournal.com/tag/

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2017-02-10 15:58, Oleg Artemiev wrote:
> Hi
>
> It could be nice to have abilities for dom0 -> domU copypaste and
> DomU->Dom0 copypaste. Though such a copypaste is considered as
> insecure and forbidden currently. Could it be implemented
> similarry to subgraph way of X<->X proxying?
>
> I mean assign some specific restricted environment you may
> copy/paste this way. Requirement to switch workflow is still
> annoying. I've already got a habbit to use Ctrl_Shift-C +
> Ctrl_Shift-V, but once I need copy info from dom0 to domU and back
> I've to switch to files via qrexec .
>
> Subj ?
>

See:

https://github.com/QubesOS/qubes-issues/issues/2450

Please help test this, if you can:

https://github.com/QubesOS/qubes-manager/pull/15

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----
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=feld
-----END PGP SIGNATURE-----

[Andrew David Wong]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2017-02-10 23:38, Andrew David Wong wrote:
> On 2017-02-10 15:58, Oleg Artemiev wrote:
>> Hi
>
>> It could be nice to have abilities for dom0 -> domU copypaste and
>> DomU->Dom0 copypaste. Though such a copypaste is considered as
>> insecure and forbidden currently. Could it be implemented
>> similarry to subgraph way of X<->X proxying?
>
>> I mean assign some specific restricted environment you may
>> copy/paste this way. Requirement to switch workflow is still
>> annoying. I've already got a habbit to use Ctrl_Shift-C +
>> Ctrl_Shift-V, but once I need copy info from dom0 to domU and
>> back I've to switch to files via qrexec .
>
>> Subj ?
>
>
> See:
>
> https://github.com/QubesOS/qubes-issues/issues/2450
>
> Please help test this, if you can:
>
> https://github.com/QubesOS/qubes-manager/pull/15
>

(Admittedly, this only covers a subset of your desired functionality.)

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJYnr/TAAoJENtN07w5UDAw040QAM6CHlPgQsLOODWFFmUcu3nB
rkpbeIb/GnP/xN0ypVS4Mu3XThfiVblbOvtXo/a35ZIp5KnGlmmu0JEJenOPHXnS
qboINRf8jux3Zbog0uqU1ggxFSwtYXs8s26Dp17fZVKsXmoPDBW0qNxy+r+zxx8I
+/AzAG5ySCFOKTkCd71Ezk3MZf6y2ycI1I8ZuAo9OAFaAosABcDvizNO6iEoJM4g
aNhnsiUrE2K3Ez3a59ulD2NLKP3F/RpScG/diIUoH9a3DioM+83SErFcAMuZPSjk
ZBXtORMKnpIarv/PAmRvK+PNRQauwoLDOUHlPI7lsH0mnlvzKgYdBs94zfTaBn54
pLliflmFNioOgD7s/6IIiz4IDwrvzGsTEAwxbWC+/N1M0+kO1VpPwokx1v6hc3Fg
Dj9bZTTczW4DR3EOl3+ULVsgKQhGm/sFFtz30MONerZIY0ShK/xUiddIt1t0n2Ql
h2zR/Sz3J+44P0FkeDPuMIVvet1Z8cO7pLx2dAZYxJxJoiu246lzMdPYCwN8nm7A
gfv7h7Ac2RhvQ39eVmXuM6LBcSU96qAnke0UVDsMi/MCHzkLXvaSdsIFkDihKBD7
X8/Z3Yxf0EsXSwcAbDrAGmrdFyCST6hUNgnaZYROeOwNnR6ZPl+WCcfEV5HTZKqE
2WvPGP9PGUSA1S1RWbOJ
=Q+7O
-----END PGP SIGNATURE-----