https://www.qubes-os.org/doc/anti-evil-maid/
In dom0: sudo qubes-dom0-update anti-evil-maid
...but still a little unsure how and where to set up AEM?
My setup is as follows:
a) I have setup a sys-usb with 2 devices selected in VM settings(working well!)
b) I believe my threat is likely from something I click online or in email(including an attachment)
c) I am concerned however with some one plugging in a malicious USB
d) I am running qubes 3.2 on a laptop and do not have/need any peripheral USB devices such as mouse, webcam, etc.
e) I do however need to plug in a thumbdrive and backup drive so I can backup my data and save/get files to and from a thumb drive.
If I am reading the instructions correctly I need to make a choice between threat vector c) or d).
My question are:
1) I have only selected 2 devices for my sys-usb yet have 3 USB slots on my laptop? Why is there not a 3rd device for me to select in my sys-usb? The 2 I have selected are labeled "00:1a.0" and "00:1d.0" followed by "USB controller..."
2) If I need to decide between threat vector c) or d). How would this command be different for each scneario? "sudo qubes-dom0-update anti-evil-maid"...
3) If I add AEM to my laptop can I still wipe my laptop and reinstall Qubes again?
Sorry for the noobie question...
Thanks,
V