On Friday, February 16, 2018 at 1:38:32 AM UTC-5, [799] wrote:
> Additional Info:
> 
> I have tested the screenshot tool in an unchanged Fedora 26 template, no 
> content is shown after screenshoting.
> Instead of my first post, the screenshot is only shown as a white (not black) 
> area.
> 
> The screenshot tool is working in dom0.
> 
> I have run lspci in dom0:
> 
> 00:02:0 VGA compatible controller: Intel Corporation 4th Gen Core Processor 
> Integrated Graphics Controller (rev 06)
> 
> 01:00.0 VGA compatible controller: NVIDIA Corporation GK106GLM [Quadro 
> K2100M] (rev all)
> 

I have to admit that I'm fairly new to this OS, but it seems to me you don't 
really want a screen capture program to work out of one of the vms.  That would 
break the compartmentalization badly, I think.  As you note, it works in dom0 
(as it does with me), and that's where it should work.

I'm more used to VirtualBox than Xen, so the way I get my head around Qubes is 
to think of it simply as a very highly granular Virtualbox setup.  In 
VirtualBox, if you open up a Windows desktop and use the screenshot program in 
that, you *only* expect it to work *on that desktop.*  You can't open a 
screenshot program in the Windows desktop and get a shot of the Fedora desktop.

The same thing would be true here, except the vms don't have desktops -- only 
windows.  So... there's no desktop to take a screenshot of, except for dom0.  
It seems to me that if my fedora vm could take a shot of the entire screen, 
then the whole compartmentalization thing would be shot to hell.

I may be wrong -- I'm not an expert here -- but I simply wouldn't expect it to 
work.  There's this ironclad rule in life that usability and security are 
inversely related.  You can mitigate it a little, or make it worse.  The TSA 
for instance (for those of you outside the US, the TSA is our airport security 
service) maximizes inconvenience for a minimal to moderate increase in 
security.  Qubes attempts to minimize inconvenience for a maximal increase in 
security.  But the relationship still exists.  Security is *always* 
inconvenient.


billo

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/97a49eb7-cbca-49f6-b102-f75211602ee3%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to