Admin privileges, new APIs and Firewall

18 views

Skip to first unread message

nicholas roveda

unread,

Aug 20, 2017, 5:53:10 PM8/20/17

to qubes-users

With the new Admin APIs is there a way to set up a FirewallVM with an Application Firewall running inside that can pop up dialogs always on top to let the user decide where to accept or not a connection?

Problems:
1) Unprivileged VM windows always on top
2) The Firewall VM need to know details about the app trying to connect

The second one I think it can be solved by adding the infomations needed in the payload at the SourceVM and than let the FW remove them or by incapsulating the packets in an another IP layer.