When I install something from a tarball, I try to minimize processing the software in the particular TemplateVM. I try not to run any script from it. Even unpacking is a potential threat (in case of vulnerability in the unpacker). This is also the reason why I don't prefer compilation from source.
Maybe DVM could resolve some of those problems. Unfortunately, this is going to be slow if the DVM is based on the currently running template. Qubes 4 will have redesigned DVMs that seem to avoid this issue. Regards, Vít Šesták 'v6ak' -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/90077405-fbdd-44e5-83b2-c1687a25d2c9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
