On Thu, Jul 20, 2017 at 12:32 PM, js...@riseup.net <js...@riseup.net> wrote: > Jean-Philippe Ouellet: >> On Qubes, it's a completely different story. First, I pass my USB >> printer or scanner through to a DispVM. To print, I just copy the file >> to the DispVM, open it with anything, and print it, and the printer is >> automatically found and "just works" (thanks Fedora). To scan: I pass >> the printer to a DispVM, open simple-scan, click the scan button, and >> it just works! When I'm happy with my scan, I copy it out of the >> DispVM and then convert to trusted PDF! So far every printer or >> scanner just works the first time, I haven't needed to look under the >> hood for anything. >> >> With sys-usb, DispVMs, and convert-to-trusted-pdf I feel reasonably >> confident that if the printers or scanners were malicious, the worst >> they could do is mutate my documents or store them for later retrieval >> by an adversary (which is an inherent problem with any commodity >> printer and totally unrelated to the OS used to interface with). This >> would be even more true with a stateless laptop without any persistent >> mutable firmware for the USB controllers, and when sys-usb can act >> like a DispVM itself without hacks (R4?). > > Hi, > > I've been having some problems with this myself. Specifically, I'm not > sure how to pass my USB printer to an appVM. The only thing I can see to > do is to attach my whole USB controller to a VM, but I'm pretty sure if > I do that I'll lose my input devices (USB keyboard and mouse) and not be > able to control the system.
See https://www.qubes-os.org/doc/usb/#attaching-a-single-usb-device-to-a-qube-usb-passthrough > Do you have to have a usbvm (sys-usb) in order to get this to work? Yes. > My appVMs are based on a debian-8 template, if that matters. I'm not aware of any debian-specific issues with USB passthrough, although I have not tried it myself either. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CABQWM_AC90_-e89R-RC-i7ZV4LGJkaR3Q6_4-A545mU0XghK2A%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
