-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
On 2016-10-14 15:18,
raah...@gmail.com wrote:
> On Friday, October 14, 2016 at 6:16:16 PM UTC-4,
raah...@gmail.com wrote:
>> On Thursday, October 13, 2016 at 2:36:30 PM UTC-4, Andrew David Wong wrote:
> On 2016-10-13 03:45, Robert Mittendorf wrote:
>>>>> Am 10/13/2016 um 04:50 AM schrieb
raah...@gmail.com:
>>>>>>
>>>>>> feature. I use to make menu shortcuts to launch programs in dispvms inheriting firewall rules. But xfce only lets you edit already existing rules, not create new ones :( editing a config file is a little too much effort for me lol.
>>>>>>
>>>>> You can edit the rules in Xfce-Dom0 via the Qubes VM Manager?!
>>>>>
>>>>> How can this "feature" be disabled? I want to start a normal DispVM, not a "special" DispVM.....
>>>>>
>>>>> Use Case: Mail VM is only allowed to access Mail-Server. I want to start a Browser in DispVM for urls in Mails.
>>>>> This works fine, but those "special" DispVMs have the same limitations. I want just a normal DispVM like the one started via Dom0. The only way to achieve this afaik is to let the special DispVM connect to NetVM, so no ProxyVM is used. But this means that the DispVM has access to the intranet.....
>>>>>
>
> This is precisely the use case I described in issue #1296, which I linked in my previous message:
>
>
https://github.com/QubesOS/qubes-issues/issues/1296
>
>>
>> couldn't you just use a normal dispvm then? meaning why even launch anything from within an appvm? Just run it from dom0, like the default firefox dispvm menu item.
>
> only reason i'd launch a program in a dispvm from within an appvm, is to inherit its firewall rules.
>
Starting a new DispVM from dom0 and setting its NetVM is a lot more labor-intensive than simply clicking a link in an email and having the rest work automatically.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=BVEY
-----END PGP SIGNATURE-----