On 12/10/2016 12:36 PM, rtian...@gmail.com wrote:
On Saturday, December 10, 2016 at 6:03:17 AM UTC-7, jkitt wrote:
What's it like to update - is it relatively simple? Would you say it's more
secure than Debian or Fedora?
It's easy. Shut down your Mirage OS Firewall VMs, copy over the new kernel
files to the relevant directory in /var/lib/qubes/vm-kernels in dom0, and then
restart the Mirage firewalls.
However, I don't know if it's more secure than using a Debian or Fedora based
sys-firewall; it *might* help guard against a 0 day cascade though.
My feeling is this is a good step in exploring minimal resource use and
attack surface. But in this particular role--firewalls--the risk is
fairly low. Qubes configures sys-firewall as 'green' I think for this
Where this kind of minimization may be more valuable is in running
high-risk VMs like sys-net and sys-usb, but that is understandably more
You received this message because you are subscribed to the Google Groups
To unsubscribe from this group and stop receiving emails from it, send an email
To post to this group, send email to email@example.com.
To view this discussion on the web visit
For more options, visit https://groups.google.com/d/optout.