Re: [qubes-users] Qubes 3.2: Temporarily allowing full access does not revoke it after the time runs out

[David Hobach]

- open in dom0: /usr/lib/systemd/system/qubes-reload-firewall@.timer
and add "OnUnitActiveSec=1m" on the end of file.


- Reload systemd config -> "systemctl daemon-reload" and try to test again.

I didn't test it though, just my guesses from reading your proposal.

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0a4767dd-0683-c55a-47d2-2585749c443a%40hackingthe.net.
For more options, visit https://groups.google.com/d/optout.

Doesn't changing the config and reloading all services with changed config just reload the firewall service? Then of course the iptables rules are re-generated taking the expired timer into account. So basically you're just doing a manual reload because the automatic didn't trigger or work when it should have?

smime.p7s
Description: S/MIME Cryptographic Signature