qubes wallpaper

[haaber]

Hello,

I understand that importing a custom wallpaper may open a security
breach for exploits against the image decoder inside dom0. On the other
hand side, people (me inclusive) like to customize a little bit their
system.

Nothing would be more natural as to 'sanitize' pictures that should go
to dom0. Since qubes trusts rgb format (at least to secure pdf's), this
seems a natural starting point. Helas! xfce wallpaper management cannot
read rgb files ...

Did someone already think about a possible solution? Bernhard

[lok...@gmail.com]

On Saturday, 4 March 2017 23:15:22 UTC+8, haaber wrote:

> Nothing would be more natural as to 'sanitize' pictures that should go
> to dom0. Since qubes trusts rgb format (at least to secure pdf's), this
> seems a natural starting point. Helas! xfce wallpaper management cannot
> read rgb files ...

You can always convert the image from its original source into PNM (or some equally simple format) and then convert it to something that Xfce can read (like PNG).

If you want to be as safe as possible, you should do the initial conversion in a dispvm, and then use a different VM to convert to PNG. This is because you should assume that the dispvm has been compromised after the conversion.

[Unman]

Have you looked at the qvm-convert-img tool? I think it is what you're
looking for.

[Grzesiek Chodzicki]

You know you could just view the picture in fullscreen and then take a screenshot of it right?