> I tried to attach 1 hdd(storage block) to different vm at the same time) 
> something like this
> 
> qvm-block attach work dom0:sdd --persistent
> 
> qvm-block attach personal dom0:sdd --persistent
> 
> then if hdd is attached one appvm, it won't work in another appvm(not even 
> starting a appvm).
> 
> is it normal behavior?


Yes that is normal functionality. If you want to add a device with persistence
you must have the Virtual Machines turned off. AND you can only have one VM 
running at a time. The Qubes Team did make a reference to this here. 

https://www.qubes-os.org/doc/assigning-devices/
"While PCI device can only be used by one powered on VM at a time, it is 
possible to assign the same device to more than one VM at a time. This means 
that you can use the device in one VM, shut that VM down, start up a different 
VM (to which the same device is also assigned), then use the device in that VM. 
This can be useful if, for example, you have only one USB controller, but you 
have multiple security domains which all require the use of different USB 
devices."

As well, if you attach a usb device to multiple VMs, you are drawing an attack 
vector line from one to the next. USB devices, are inherently not trusted. 

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/bf5c94cc-d769-40c8-8bcf-7cc12b093826%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to