On 2020-04-02 22:39, Jason Phan wrote:
> On Apr 02, Demi M. Obenour wrote:
>>>> I had a problem where a converted PDF didn’t print properly,
>>>> probably due to missing DPI information.
>> Original converter
> 
> I'll print some stuff tomorrow and see what's what.

Thank you.

>> Xen is the main sandboxing, but additional sandboxing is definitely 
>> worthwhile.
> 
> I think general security mechanisms like that should probably be implemented 
> outside of qvm-convert-pdf though. Can't say whether we should though, 
> hardening a DispVM seems unecessary to me given how they're typically used.
> 
>            Jason Phan

More than anything else, it is a matter of making an attacker’s
life as hard as possible.  Adding a seccomp filter and namespacing
(via bubblewrap) is cheap.

Sincerely,

Demi

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-devel+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/b3e27ff7-059e-5370-cd6d-84158f86137d%40gmail.com.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to