I broke qubes.UpdateProxy. Does anyone have a default version of it I can reference to fix it in dom0?

[setem...@posteo.net]

I was halfway through setting my updateProxy file to go off of a sys-vpn
instead of sys-whonix. However I can't remember how it was supposed to
be initially. Could someone show me a default one or otherwise tell me
how to adjust this one? Thank you

$type:TemplateVM $default allow,target=sys-whonix
#target formerly set to sys-vpn
## Note that policy parsing stops at the first match,
## so adding anything below "$anyvm $anyvm action" line will have no
effect

## Please use a single # to start your custom comments

# Upgrade all TemplateVMs through sys-whonix (formerly sys-whonix)
$type:TemplateVM $default allow,target=sys-whonix

# Upgrade Whonix TemplateVMs through sys-whonix (formerly sys-whonix)
$tag:whonix-updatevm $default allow,target=sys-whonix

# Deny Whonix TemplateVMs using UpdatesProxy of any other VM.
$tag:whonix-updatevm $anyvm deny

# Default rule for all TemplateVMs - direct the connection to sys-net
$type:TemplateVM $default allow,target=sys-net

$anyvm $anyvm deny

[awokd]

setem...@posteo.net:

> I was halfway through setting my updateProxy file to go off of a sys-vpn
> instead of sys-whonix. However I can't remember how it was supposed to
> be initially. Could someone show me a default one or otherwise tell me
> how to adjust this one? Thank you

Think this is default if you chose sys-whonix for updates:

$type:TemplateVM $default allow,target=sys-whonix

## Note that policy parsing stops at the first match,
## so adding anything below "$anyvm $anyvm action" line will have no effect

## Please use a single # to start your custom comments

# Upgrade all TemplateVMs through sys-whonix.
#$type:TemplateVM $default allow,target=sys-whonix

# Upgrade Whonix TemplateVMs through sys-whonix.

$tag:whonix-updatevm $default allow,target=sys-whonix

# Deny Whonix TemplateVMs using UpdatesProxy of any other VM.
$tag:whonix-updatevm $anyvm deny

# Default rule for all TemplateVMs - direct the connection to sys-net
$type:TemplateVM $default allow,target=sys-net

$anyvm $anyvm deny

--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots