Re: [qubes-users] Qubes 4.1 qrexec issue?

2022-03-09 Thread Demi Marie Obenour
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Sun, Mar 06, 2022 at 09:03:29PM +, 'taran1s' via qubes-users wrote:
> I have an issue with Split GPG as well as with opening files in the
> disposable VMs and with the qrexec in the guide How to use Monero CLI/daemon
> with Qubes + Whonix too.
> 
> https://www.getmonero.org/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.html
> 
> Split GPG
> 
> Opening Thunderbird, I get following errors in the notification popup:
> 
> Denied: whonix.NewStatus
> Denied whonix.NewStatus+status from work-email to sys-whonix

This is a Whonix problem I am not familiar with.

> I have to as well make every gpg action confirm in the Dom0 Operation
> Execution with Target GPG backend.

You can solve this problem by adding a line such as:

qubes.Gpg  + work-email  allow

to `/etc/qubes/policy.d/30-user.policy`.  Be sure to replace 
with the name of the backend qube.

> Using dispVMs from within AppVM
> 
> When trying to convert file or open it in the disposable VM from within the
> normal AppVM, I get an error popuplike :
> 
> Denied: qubes.PdfConvert
> Denied qubes.pdfConvert from work-email to @dispvm

What is work-email’s default DisposableVM template?  It’s in the
“Default DispVM” column in Qubes Manager.  If it is “None” or “default
(None)” you will get this error.  Setting it to a valid DisposableVM
Template (such as whonix-ws-16-dvm) should solve the problem.

> Any advice appreciated!
> 
> -- 
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/qubes-users/3c5f45cb-0e56-5bb5-a4ea-f68d001e2856%40mailbox.org.

- -- 
Sincerely,
Demi Marie Obenour (she/her/hers)
Invisible Things Lab
-BEGIN PGP SIGNATURE-
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=Lf2e
-END PGP SIGNATURE-

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/YikX9jGKX7e9bn5D%40itl-email.


[qubes-users] Qubes 4.1 qrexec issue?

2022-03-06 Thread 'taran1s' via qubes-users
I have an issue with Split GPG as well as with opening files in the 
disposable VMs and with the qrexec in the guide How to use Monero 
CLI/daemon with Qubes + Whonix too.


https://www.getmonero.org/resources/user-guides/cli_wallet_daemon_isolation_qubes_whonix.html

Split GPG

Opening Thunderbird, I get following errors in the notification popup:

Denied: whonix.NewStatus
Denied whonix.NewStatus+status from work-email to sys-whonix

I have to as well make every gpg action confirm in the Dom0 Operation 
Execution with Target GPG backend.


Using dispVMs from within AppVM

When trying to convert file or open it in the disposable VM from within 
the normal AppVM, I get an error popuplike :


Denied: qubes.PdfConvert
Denied qubes.pdfConvert from work-email to @dispvm

Any advice appreciated!

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/3c5f45cb-0e56-5bb5-a4ea-f68d001e2856%40mailbox.org.