"Restricted" applications launchable from AppVM via terminal?

[Tomei Ningen]

Hi all,

I'm not sure whether anyone else has noticed this, if this is a feature/bug, or if I'm simply misunderstanding what should be occuring, but I noticed that despite ostensibly restricting applications from running within a given VM via Qubes Manager by curating the "Selected" application list (VM settings > applications > 'Available' / 'Selected'), I'm still able to launch whatever arbitrary application from the command line. Is this intentional?

Best,

TN

Sent with ProtonMail Secure Email.

[Unman]

That's just a simple way of adjusting the applications that appear in
the Menu for that qube. It's not a way of restricting what
applications can be run in the qube.

[Tomei Ningen]

Thank you for the quick answer, unman! I appreciate the added clarity.

Sent with ProtonMail Secure Email.