W dniu sobota, 26 listopada 2016 18:56:49 UTC+1 użytkownik Grzesiek Chodzicki 
napisał:
> W dniu sobota, 26 listopada 2016 18:53:26 UTC+1 użytkownik Pawel Debski 
> napisał:
> > Folks,
> > 
> > I'm trying to create a VM that will handle all USB devices that are or may 
> > be connected to the machine.
> > 
> > 1. I have created a new AppVM based on fedora-24-full-sw template.
> > 
> > 2. fedora-24-full-sw template is a copy of Fedora 24 template with all 
> > sorts of additional software installed, for example for Bluetooth handling, 
> > 3G modem, finger print reader, camera, flash card reader and so on.
> > 
> > 3. I have assigned an USB controller to the newly created AppVM and 
> > switched-off memory balancing in the options as recommended by the message 
> > on "Advanced" tab.
> > 
> > 4. When I'm trying to start the VM I'm getting the following message:
> > "PCI device in use by driver xenlight"
> > 
> > Please note that at the moment only one single USB bus is assigned to this 
> > VM.
> > Without any assigned devices this VM starts properly.
> > 
> > What shall I do to make it work with USB bus?
> > 
> > Best regards
> > PD
> 
> put following command in dom0 terminal: qvm-prefs -s vmname pci_strictreset 
> false

Tx Greg, that works.

Can we briefly discuss how much does it lower the security of the workstation. 
I mean: does it really allow to plug-in fabricated USB device to install 
keylogger to obtain credentials to highly sensitive applications running in 
other qube (say VaultVM).

What other potential attack scenaria does it open?
(assuming that one is interested only to protect VaultVM transient content)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/c48ebb07-ed82-418d-9276-b5623e5bc815%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to