On Sun, Jun 11, 2017 at 10:16 PM, Christopher Thacker <[email protected] > wrote:
> > On Sun, 11 Jun 2017 at 17:29, blacklight <[email protected]> wrote: > >> On Sunday, 11 June 2017 03:56:50 UTC+2, Christopher Thacker wrote: >> > I want to make a dedicated USB Qube per the directions shown here: >> > >> > https://www.qubes-os.org/doc/usb/ >> > >> > However I have some problems: >> > >> > 1) The directions state "You can create a USB qube using the management >> stack by performing the following steps as root in dom0:" >> > >> > Unfortunately I don't know how to access root in Qubes 3.2, which is >> what I use. I don't even know if root is enabled. >> > >> > How should I proceed? >> > >> > 2) The same directions briefly discuss hiding all USB controllers from >> dom0. >> > >> > Should I do so? >> > >> > FYI - My system is Qubes 3.2 on i7-4700hq at 2.4ghz with 4 USB 3.0 >> slots and 8gb system ram. >> > >> > Thank you. >> >> first,with as root, they mean you should type "sudo" in front of all the >> commands (without the quotation marks) in the dom0 command line. >> second, it depends on your threat level, as it is described: during boot, >> dom0 is shortly exposed to all the usb controllers, so if one where to be >> able to plug in a malicous usb drive during the early boot period, he might >> be able to takeover your system, this can be prevented by blacklisting all >> usb controllers in dom0. deciding whether this might be a threat in your >> situation is up to you and depends entirely on your threat level. >> > > > unman, blacklight - > > I appreciate your input but I decided at this point, Qubes requires more > skill than I can muster. It is a fantastic product but I just can't keep > track of the moving parts. > > I agree that without some confidence with the command line and the terminal you definitely need some luck to be able to use Qubes long term. However luck depends also on the laptop you have. Some are more compatible than others. I selected my laptop just to be able to run Qubes reliably. Of course it is possible to use it also with less compatible ones, but then you need more time and experience to fix the problems. -- >> You received this message because you are subscribed to a topic in the >> Google Groups "qubes-users" group. >> To unsubscribe from this topic, visit https://groups.google.com/d/ >> topic/qubes-users/AS8PkqO9zVI/unsubscribe. >> To unsubscribe from this group and all its topics, send an email to >> [email protected]. >> To post to this group, send email to [email protected]. >> To view this discussion on the web visit https://groups.google.com/d/ >> msgid/qubes-users/4e0a2518-1df4-4583-a1d0-17469b5604bb%40googlegroups.com >> . >> For more options, visit https://groups.google.com/d/optout. >> > -- > -- Christopher Thacker > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To post to this group, send email to [email protected]. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/qubes-users/CANpb_zVPD1t7i8rA%3DxL-gHYe% > 2BSB9sJpPM%2BfDhnJfhDfLpRqpyw%40mail.gmail.com > <https://groups.google.com/d/msgid/qubes-users/CANpb_zVPD1t7i8rA%3DxL-gHYe%2BSB9sJpPM%2BfDhnJfhDfLpRqpyw%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qAjkY5gFopvmRuQ7C4xu_b32W4VAyWfPjkq0PaVqF30-A%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
