On Thu, Dec 07, 2017 at 09:39:19AM -0800, [email protected] wrote: > On Thursday, December 7, 2017 at 2:26:49 AM UTC-7, Tom Zander wrote: > > Making them available is something only dom0 can do, to make sure that a > > compromised qube can’t get itself more resources. > > That makes sense for attaching. > > What about detaching? Could a qube rid itself of resources? >
See my previous reply on doing this from a qube: To detach you only need a service file in dom0 like: qvm-block -d $QREXEC_REMOTE_DOMAIN and the corresponding policy file, to do this. unman -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20171207180114.s5tibymdzu4btitb%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
