Change default DisposableVM for sys-whonix?

6 views
Skip to first unread message

brenda...@gmail.com

unread,
Apr 5, 2019, 2:54:27 PM4/5/19
to qubes-users
By default, even though launching from this VM is disabled on install, it is set to dvm-fedora. Might it not be better that it be (none) or perhaps a whonix-ws dvm?

I believe that even if the user enabled the capability, under the OOTB configuration, this change probably doesn't provide any additional security as root on sys-whonix can bypass onion routing.

However, I believe some users tunnel TOR via VPNs and if there were perhaps an attack on the tor networking or other components in sys-whonix, AND the user turned on the capability, a default value of (none) or whonix-ws might be safer.

B

Reply all
Reply to author
Forward
0 new messages