-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Sat, Mar 11, 2017 at 01:07:30AM +0000, Andrew Clausen wrote: > Hi Marek, > > On 10 March 2017 at 17:57, Marek Marczykowski-Górecki < > [email protected]> wrote: > > > > Are we implementing MIME-handling to open a specific file/type in > > > DisposableVMs only, or should the user be able to choose/enter any one > > > of their installed VMs? As a Qubes user I would like the ability to open > > > all PDFs in, say, my work AppVM, rather than only being able to only set > > > global rules for files to open in Disposable VMs. > > > > Technically it's indeed very similar, but in practice it doesn't make > > much sense - if you want to open some file always in the same > > non-disposable VM, simply keep the file there. > > > > Isn't this similar in practice too? For example, when I download a > document in a web browser (not in Qubes), it opens is straight away in a > document viewer; I can then click to "save a copy" from the document > viewer. I think it makes sense to extend this standard workflow to opening > the document in a preferred VM, where it can then be saved. > > For example, if I receive a PDF attachment in my "personal" VM, I usually > want to open (and possibly save it) in my "work" VM.
There is one important difference between sending a file to a VM (qvm-copy-to-vm) and opening it there - the later may easily compromise target VM, especially in case of complex file formats. While compromising Disposable VM by opening malicious file there isn't a problem (this is exactly what Disposable VM is for), it is a problem in case of non-Disposable VM. This means that opening a file in non-Disposable VM should be decision made in target VM (where you sent file), not the one sending a file there. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab A: Because it messes up the order in which people normally read text. Q: Why is top-posting such a bad thing? -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJYw6x+AAoJENuP0xzK19csQ6kH/1cZCU1pAGvQrEBsvLGMdQ0H /8L/RlUx4/HuRskGyKmZ3ItBWkcVVy//rrKUFEB3RT/zyQ5JedpYyJbjyU+03Rmd rtyZNdayi9n/mf0maSRCx29elUI+ERflGahuiIADiM55eCzrJUmx9FpCkXrjQMHw 1jl+BV321YCzYV9+tfVewBwtOLIM3E6Q02/V+3oOU25bkHT8nwziQFdOT0Rnn0t7 mr5EV+Wc2ldr6CT2iUHqCYqymDnabf1e12+6DTX8+wUJHGB1C/QgIukdTZKk5q0+ 9Bsi7092ZAXXt4hOXTTPguXYobROgJQ5rUhxPN7jURvn6SB97KruAKlx+BNZd8I= =KK9F -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/20170311075126.GE15825%40mail-itl. For more options, visit https://groups.google.com/d/optout.
