Re: [qubes-users] Isn't it bad, that compromized vm can create any number of dispVMs?

2016-08-29 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Thu, Aug 25, 2016 at 12:56:15PM +0200, Alex wrote: > On 08/25/2016 12:53 PM, Arqwer wrote: > > Command qvm-run '$dispvm' xterm if called from an appVM will run > > xterm in a new dispVM. If attacker gained access to an appvm, he > > possibly can

Re: [qubes-users] Isn't it bad, that compromized vm can create any number of dispVMs?

2016-08-25 Thread Alex
On 08/25/2016 12:53 PM, Arqwer wrote: > Command qvm-run '$dispvm' xterm if called from an appVM will run > xterm in a new dispVM. If attacker gained access to an appvm, he > possibly can run script, that will create thousands of new dispVMs > and freeze my computer. I don't like this. May be it's

[qubes-users] Isn't it bad, that compromized vm can create any number of dispVMs?

2016-08-25 Thread Arqwer
Command qvm-run '$dispvm' xterm if called from an appVM will run xterm in a new dispVM. If attacker gained access to an appvm, he possibly can run script, that will create thousands of new dispVMs and freeze my computer. I don't like this. May be it's better to disable this functionality by