On 12/10/2016 12:36 PM, rtian...@gmail.com wrote:
On Saturday, December 10, 2016 at 6:03:17 AM UTC-7, jkitt wrote:
What's it like to update - is it relatively simple? Would you say it's more 
secure than Debian or Fedora?
It's easy. Shut down your Mirage OS Firewall VMs, copy over the new kernel 
files to the relevant directory in /var/lib/qubes/vm-kernels in dom0, and then 
restart the Mirage firewalls.

However, I don't know if it's more secure than using a Debian or Fedora based 
sys-firewall; it *might* help guard against a 0 day cascade though.

My feeling is this is a good step in exploring minimal resource use and attack surface. But in this particular role--firewalls--the risk is fairly low. Qubes configures sys-firewall as 'green' I think for this reason.

Where this kind of minimization may be more valuable is in running high-risk VMs like sys-net and sys-usb, but that is understandably more complex.


You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
For more options, visit https://groups.google.com/d/optout.

Reply via email to