I think the best way to make disp sys-usb for the command with the 
following:

> sudo qubesctl state.sls qvm.sys-usb
> qvm-prefs sys-usb disposable_template enable
> qvm-prefs sys-usb tags add usb-dvm

then in /etc/qubes-rpc/policy/qubes.InputKeyboard of dom0:

> @tag:usb-dvm  dom0  allow,user=root,default_target=dom0

on top of:

> $anyvm $anyvm deny


Does it works?
On Monday, September 19, 2022 at 10:06:09 AM UTC-7 Lasse Kliemann wrote:

> Greetings, upon installation a few weeks ago, I chose to create a single
> VM for USB and networking, which is called sys-net. This was in order to
> support USB network devices. The latter is no longer necessary, since
> the last kernel update introduced support for my internal WLAN adapter
> (Intel Corporation Wi-Fi 6 AX210/AX211/AX411 160MHz in a Thinkpad P14s).
>
> Now I would like to have sys-usb *and* sys-net, and also make sys-usb
> disposable. Will the following work?
>
> a) sudo qubesctl state.sls qvm.usb-keyboard (I use USB keyboard.)
> b) follow 
> https://www.qubes-os.org/doc/disposable-customization/#create-the-sys-usb-disposable
>
> Thanks!
>
> -- 
> Kind Regards / MfG
> Dr. Lasse Kliemann
> Westring 269, 24116 Kiel, Germany
> E-Mail: la...@lassekliemann.de
> Telegram / Wire: @lassekliemann
> Signal / Phone: +49 162 66 88 468
>
> Work Address:
> Department of Mathematics
> Kiel University
> *Heinrich-Hecht-Platz 6*, 24118 Kiel, Germany
> E-Mail: l.kli...@math.uni-kiel.de
>

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e7d3b9b0-eb47-488c-9b77-3284789b75c3n%40googlegroups.com.

Reply via email to