Re: [qubes-users] Re: Popup When Starting or Shutting down Whonix VMs

2019-09-11 Thread 'awokd' via qubes-users

pudding:


/etc/qubes-rpc/policy/whonix.NewStatus, and it had only one line:

@anyvm    @anyvm    ask

I then added a line "$tag:anon-vm    $tag:anon-gateway    allow" at the 
top of the file. It seems that this fixed the popup problem. Also, I 
noticed anon-whonix now appears in the right-click menu of sys-whonix 
sdwdate-gui icon. I am not sure if this is OK security wise, though. If 
not, I will try your suggestion and update my Whonix templates from 
testing repo. Anyway, thank you for the idea which helped me find the 
solution. Many thanks!


Mine has these three lines in it, not sure why ours are different since 
both our dom0's have been updated:


$tag:anon-vm $tag:anon-gateway allow
$tag:anon-vm sys-whonix allow
$anyvm $anyvm deny

--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/6a86c171-2882-aa78-f9e1-bd534bf1cb2f%40danwin1210.me.


Re: [qubes-users] Re: Popup When Starting or Shutting down Whonix VMs

2019-09-11 Thread pudding

Hello awokd,

Thanks for the answer, I remember seeing that post too. I checked the 
dom0 log and found that hitting "Cancel" generated the following log:


dom0 qrexec[23456]: whonix.NewStatus+anon-whonix: anon-whonix -> 
sys-whonix: denied: denied by the user 
/etc/qubes-rpc/policy/whonix.NewStatus:7


My guess was that the popup was triggered by anon-whonix registering to 
the sdwdate-gui of sys-whonix. I checked 
/etc/qubes-rpc/policy/whonix.NewStatus, and it had only one line:


@anyvm    @anyvm    ask

I then added a line "$tag:anon-vm    $tag:anon-gateway    allow" at the 
top of the file. It seems that this fixed the popup problem. Also, I 
noticed anon-whonix now appears in the right-click menu of sys-whonix 
sdwdate-gui icon. I am not sure if this is OK security wise, though. If 
not, I will try your suggestion and update my Whonix templates from 
testing repo. Anyway, thank you for the idea which helped me find the 
solution. Many thanks!


P.S. Sorry for replying to your mailbox, I made a mistake. :(

On 9/11/19 5:49 PM, 'awokd' via qubes-users wrote:

pudding:

For your reference, I just found that the popup also randomly appears
during the time a Whonix-base VM is on. :(


There appears to be a new dom0 widget in current-testing that tells if
Whonix workstations have synced to a time source. I remember reading a
development thread about it somewhere. I bet those popups are because
something's not matching between versions. Suggest setting your
whonix-gw-15 and whonix-ws-15 templates to also update from Qubes
current-testing repo, to match dom0, and rebooting. Not getting those
popups on a PC where I've updated everything Qubes related to
current-testing.




--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/5dc97ea2-a6e5-aa5e-a1ea-60b99ea81b2b%40cock.li.


Re: [qubes-users] Re: Popup When Starting or Shutting down Whonix VMs

2019-09-11 Thread 'awokd' via qubes-users
pudding:
> For your reference, I just found that the popup also randomly appears
> during the time a Whonix-base VM is on. :(
> 
There appears to be a new dom0 widget in current-testing that tells if
Whonix workstations have synced to a time source. I remember reading a
development thread about it somewhere. I bet those popups are because
something's not matching between versions. Suggest setting your
whonix-gw-15 and whonix-ws-15 templates to also update from Qubes
current-testing repo, to match dom0, and rebooting. Not getting those
popups on a PC where I've updated everything Qubes related to
current-testing.


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/b4400701-0d06-3876-7a9b-bcee27d05c1c%40danwin1210.me.


[qubes-users] Re: Popup When Starting or Shutting down Whonix VMs

2019-09-11 Thread pudding
For your reference, I just found that the popup also randomly appears 
during the time a Whonix-base VM is on. :(


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/877e037a-78c7-90ac-25ca-8a7621577009%40cock.li.


[qubes-users] Re: Popup When Starting or Shutting down Whonix VMs

2019-09-11 Thread pudding

Hello awokd,

No. I updated my Whonix templates from stable repo. Here's exactly what 
I did:


1. I updated whonix-gw-15 and whonix-ws-15 from stable repo (plenty of 
packages to update), and the popup appeared when shutting down these two 
templateVMs;


2. I restarted sys-whonix after templateVMs were shut down, and updated 
dom0 using sys-whonix from stable repo; two packages related to kernel 
were updated, but the popup still appeared when trying to start 
Whonix-based VMs;


3. I updated dom0 from the current-testing repo; the popup problem 
persisted;


4. I rebooted my PC, and the problem is still there.

Pressing "Cancel" in the popup makes the popup go away and the VM start 
or shutdown procedure resume as usual. The popup appears about 3-4 times 
on VM start, random , and 1 time on VM shutdown.


I have encountered this popup problem before, and was able to fix it by 
updating dom0 to current-testing repo, but this time it doesn't work. So 
if there is a way to solve it, I would like to know. Thanks!


--
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0f6360f7-eae6-6c3d-2f53-6462bc2fda6c%40cock.li.