Re: [qubes-users] USB controller after resume

2016-09-12 Thread Vít Šesták
Thank you for pointing in the right direction. It was my fault in the script for dom0. It failed in some way, causing other scripts not being called. I am sorry for that. Now, I have a quick fix, but I should make it more robust. On the keyboard: I had an idea about authenticated USB keyboard

[qubes-users] Re: Can DMA attacks work against Ethernet... or just WiFi/wireless...?

2016-09-12 Thread neilhardley
jkitt Yeah, I know that Ethernet is capable of DMA. But DMA is different from a DMA Attack A DMA attack is when a hacker exploits a software error in the Ethernet firmware, and uses that to take over the device and issue malicious DMA attacks. So I guess I'm asking whether any such

[qubes-users] Using virt-viewer for remote systems

2016-09-12 Thread Konstantin Ryabitsev
Greetings: I need to be able to use virt-viewer to access remote systems (e.g. virt-viewer --connect qemu+ssh://some.host/system vm-name), and it would appear that it's impossible to install due to conflicts: # dnf install virt-viewer Error: package virt-viewer-2.0-2.fc23.x86_64 requires

[qubes-users] Re: Is there any hope for Wayland?

2016-09-12 Thread Lorenzo Lamas
Imo a good reason for Wayland in Qubes(Dom0 at least) is because x11 lockscreen is not secure. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

Re: [qubes-users] cloning sys-net

2016-09-12 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Sep 12, 2016 at 02:06:24PM +0200, Achim Patzner wrote: > Hi! > > I upgraded a Qubes R3.1 system to the current 3.2, taking all my VMs > with me. Now I tried cloning sys-net – and failed. > > [ap@dom0 ~]$ qvm-clone sys-net sys-whatever >

Re: [qubes-users] cloning sys-net

2016-09-12 Thread Achim Patzner
Am 12.09.2016 um 15:38 schrieb Marek Marczykowski-Górecki: > On Mon, Sep 12, 2016 at 02:06:24PM +0200, Achim Patzner wrote: > > /var/lib/qubes/servicevms/sys-whatever/icon.png > > ERROR: [Errno 2] No such file or directory: > > '/var/lib/qubes/servicevms/sys-net/icon.png' > > [ap@dom0 ~]$ > > >

[qubes-users] Re: Windows 7 standalone VM fails after installing qubes-windows-tools

2016-09-12 Thread bernie
I have the same problem as OP, the exact same problem and it does not work -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to

[qubes-users] Minor annoyancies in X since I've started using xfce

2016-09-12 Thread Achim Patzner
Hi! 1) I never noticed this but I have been typing in dark rooms lately: The screen saver does not dim the keyboard when it is turning off the backlight on my P-series machines; I'm fairly sure it was working on R 3.1 (but I was not using xfce there, I only noticed its presence after someone

Re: [qubes-users] 4.0 ETA?

2016-09-12 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Sep 12, 2016 at 10:09:31AM -0700, Jan Betlach wrote: > > I am about to reinstall my Qubes. Does it make sense to wait for 4.0 release > (obviously depends on its ETA) or should I install current 3.2 and upgrade to > 4.0 later. The

[qubes-users] 4.0 ETA?

2016-09-12 Thread Jan Betlach
I am about to reinstall my Qubes. Does it make sense to wait for 4.0 release (obviously depends on its ETA) or should I install current 3.2 and upgrade to 4.0 later. The question is how difficult it is to upgrade if possible at all. -- You received this message because you are subscribed to

[qubes-users] Can DMA attacks work against Ethernet... or just WiFi/wireless...?

2016-09-12 Thread Vít Šesták
Attacker can use either a vulnerability in the card (if they know a suitable one), regardless it is Ethernet or wlan, or they also might try to exploit a legitimate feature. However, if you have VT-d supported by your CPU, motherboard and BIOS, you should be safe against such attacks. When

[qubes-users] Trying to create IP tables rules on vpn ProxyVM to only allow access to LAN and VPN IPs

2016-09-12 Thread Fredrik
I found some instructions on stackexhange but they are probably ment to be used on the same computer as you are surfing from. If I run this and disconnect my VPN nothing is blocked. What am I doing wrong? iptables -P FORWARD DROP # we aren't a router iptables -A INPUT -m state --state INVALID

[qubes-users] Re: Can DMA attacks work against Ethernet... or just WiFi/wireless...?

2016-09-12 Thread jkitt
Any software can have flaws. The only distinction between ethernet and wifi in that regards is that WiFi can be exploited by anyone within RF range regardless whether they're authenticated to the same network or not; ethernet requires a physical connection. -- You received this message

Re: [qubes-users] Trying to create IP tables rules on vpn ProxyVM to only allow access to LAN and VPN IPs

2016-09-12 Thread Chris Laprise
On 09/12/2016 05:56 PM, Fredrik wrote: I found some instructions on stackexhange but they are probably ment to be used on the same computer as you are surfing from. If I run this and disconnect my VPN nothing is blocked. What am I doing wrong? iptables -P FORWARD DROP # we aren't a router

Re: [qubes-users] Using virt-viewer for remote systems

2016-09-12 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Mon, Sep 12, 2016 at 05:06:19AM -0700, Konstantin Ryabitsev wrote: > Greetings: > > I need to be able to use virt-viewer to access remote systems (e.g. > virt-viewer --connect qemu+ssh://some.host/system vm-name), and it would > appear that

[qubes-users] Re: sound gone suddenly

2016-09-12 Thread raahelps
On Friday, September 9, 2016 at 3:33:34 PM UTC-4, jo...@mailbox.org wrote: > Hi qubes-Users, > > I just installed the newest version of Qubes-OS and every seems to work > just fine. Really great job. > Even Flash and sound and such worked but for stopped working for > no apparent reason.

[qubes-users] Blob free linux kernel?

2016-09-12 Thread J. Eppler
Hello, I was wondering if Qubes provides a blob free linux kernel for VM's? And if not why not? Best regards J. Eppler -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an

Re: [qubes-users] Re: Is there any hope for Wayland?

2016-09-12 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-09-12 06:06, Lorenzo Lamas wrote: > Imo a good reason for Wayland in Qubes(Dom0 at least) is because x11 > lockscreen is not secure. > Are you referring to this?

Re: [qubes-users] Re: Is there any hope for Wayland?

2016-09-12 Thread Vít Šesták
Well, the points you have mentioned are also dubious for mainstream Linux environment, not only for Qubes, because they suppose a malicious app already installed in the system. Other point are, however, accidental interferences with lockscreen. For example, I sometimes see Thunderbird popup on

[qubes-users] Re: Is there any hope for Wayland?

2016-09-12 Thread Vít Šesták
This one might be the best reason for Wayland in Qubes, provided that Wayland is better. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to