when in the world did rd.qubes.hide_all_usb boot optiong get added to Qubes 4.0 as a boot option?

[res...@gmail.com]

So I was strolling around reviewing the current state of my Qubes 4.0 machine and I came stumbling upon kernel boot options and suddenly seeing this rd.qubes.hide_all_usb

I checked and indeed it wasn't there before so with that in mind, I would like to ask if I am just lacking information of this being added in previous patches/updates.

[unman]

On Mon, Oct 22, 2018 at 11:29:41PM -0700, res...@gmail.com wrote:
> So I was strolling around reviewing the current state of my Qubes 4.0 machine and I came stumbling upon kernel boot options and suddenly seeing this rd.qubes.hide_all_usb
>
> I checked and indeed it wasn't there before so with that in mind, I would like to ask if I am just lacking information of this being added in previous patches/updates.
>

It's been in Qubes for some time. The intention is to hide all USB
controllers from dom0 so that they can be attached to usbVMs, and
handled there.
If you create a sys-usb qube, then the kernel parameter is automatically
added.
It's done by salt:
/srv/formulas/base/virtual-machines-formula/qvm/hide-usb-from-dom0

I'm not aware of any recent update that would have created this entry,
but I could be wrong. Have you configured a usbVM recently?

unman

[res...@gmail.com]

Not sure why I can't mark your response as the right answer to this topic to mark it as completed but I guess that's because I haven't really bound this email to this google group and I made the mistake of posting with this email instead of my actual account.

In any case, thank you for your response. I figured it out myself that it was added immediately after configuring sys-usb vm on the initial selection presented to the user on first-time boot of Qubes OS.