Re: [qubes-devel] [i3wm] Allowing i3's dmenu to work within

[Nick]

each
 AppVM



On Wed, Jul 05, 2017 at 05:59:42PM +0200, Noor Christensen wrote:

Reply-To: In-Reply-To: <20170705155942.2cnlhart6r5e3aye@mail>

On Wed, Jul 05, 2017 at 05:16:59PM +0200, Noor Christensen wrote:

On Wed, Jul 05, 2017 at 05:56:36AM -0700, Albert Mokrejs wrote:
> Also,
>
> > This list can then be piped to dmenu or rofi or whatever,
> > *running in dom0 or any other VM. *
>
> Have you somehow gotten dmenu/rofi working within a non-dom0 VM? That was
> my first attempt before I wrote the qvm-run based script, and I found that
> Qubes would not let dmenu bind the keyboard, thus leaving dmenu stuck open
> and unresponsive. If you got it working, I'm somewhat curious as to how.

Sadly I have the same experience as you.

However, if I have another window open from a program already running on
the target VM it seems to hand over the keyboard to dmenu upon receiving
focus.

I haven't verified if this is a side effect of i3wm, qvm-run, qrexec or
possibly all of them combined. Have you made any tests in other WMs like
XFCE? I know that i3wm has some configurable logic for deciding if/when
window clients should be granted focus...

Also, I would like to add that I fail to see any reason to run dmenu on
another VM than dom0 if the use case is to in turn launch another
program.

Since we are just dealing with file lists, not arbitrary shell code, I
would argue against that running dmenu in dom0 with the output from qvm-run
passed to STDIN is any less secure than running dmenu inside the VM.

In either case the obvious risk is modification of the source list of
binaries passed to the dmenu process, wherever it runs.

But maybe I am missing the point?

-- noor

|_|O|_|
|_|_|O|  Noor Christensen
|O|O|O|  n...@fripost.org ~ 0x401DA1E0

--
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/20170705155942.2cnlhart6r5e3aye%40mail.
For more options, visit https://groups.google.com/d/optout.

What is the progress regarding this? Do you guys make any of this
available in the Qubes R4 repo yet? I found none of the dmenu-like


--
Do you have lysdexia?

--
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/5c02265a.1c69fb81.c7a59.2824SMTPIN_ADDED_BROKEN%40gmr-mx.google.com.
For more options, visit https://groups.google.com/d/optout.

script specially made for Qubes available in the official repo nor it mentioned via Qubes documentation.

pgpEUJ6R8hJ79.pgp
Description: PGP signature