Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
On Mon, Mar 6, 2017 at 1:18 PM, Franz <169...@gmail.com> wrote: > > > On Sun, Mar 5, 2017 at 11:39 PM, Andrew David Wong> wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA512 >> >> On 2017-03-05 17:56, Franz wrote: >> > On Sun, Mar 5, 2017 at 10:39 PM, Andrew David Wong >> > wrote: >> > >> >> On 2017-03-05 14:18, Franz wrote: >> >>> On Sun, Mar 5, 2017 at 5:11 PM, wrote: >> [...] did it work with it plugged in at boot? >> >> >>> did not try that wondering if it may be a security risk >> >> >> >> Yes, leaving USB devices plugged in during boot can be a risk, >> >> since Qubes can't isolate USB controllers during early stages of >> >> the boot process. IIRC, Joanna's recommendation is to unplug all >> >> USB devices before (re)booting. >> >> >> >> >> > So, leaving that aside, the only remaining option would be to look >> > into some log or similar information source to try to find out why >> > the scanner appears in sys-usb, but not in dom0 qvm-usb. Any idea >> > where to look? >> > >> >> Sorry, no idea. >> >> P.S. - Franz, would you mind excluding extraneous quoted material from >> your replies? In particular, please exclude PGP signatures and generic >> Google Groups information included as a signature. >> >> https://www.qubes-os.org/mailing-lists/#discussion-list-guidelines >> >> > To go along I tried to use the USB controller that was assigned to > assignedVM, that worked in the past. But now I am unable to start the > assignedVM. The log tells: > Icon size: 128x128 > invalid PMaxSize for 0x3600015 (32767/32767) > invalid PMaxSize for 0x3600015 (32767/32767) > invalid PMaxSize for 0x360002b (533/32767) > invalid PMaxSize for 0x360002b (533/32767) > invalid PMaxSize for 0x360002b (533/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600035 (32767/32767) > invalid PMaxSize for 0x3600040 (32767/32767) > invalid PMaxSize for 0x360002b (533/32767) > invalid PMaxSize for 0x360002b (533/32767) > libvchan_is_eof > Icon size: 128x128 > domain dead > Failed to connect to gui-agent > > I do not know if ti was the last dom0 update or another reboot, but the assignment now works, while the "attaching a single USB device" yet not. Best Fran -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qAr6_bzCmL6pL%3D2GjYi_8hfjVJkj3JFoBSP2vWRgBUuXQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
On Sun, Mar 5, 2017 at 11:39 PM, Andrew David Wongwrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 2017-03-05 17:56, Franz wrote: > > On Sun, Mar 5, 2017 at 10:39 PM, Andrew David Wong > > wrote: > > > >> On 2017-03-05 14:18, Franz wrote: > >>> On Sun, Mar 5, 2017 at 5:11 PM, wrote: > [...] did it work with it plugged in at boot? > > >>> did not try that wondering if it may be a security risk > >> > >> Yes, leaving USB devices plugged in during boot can be a risk, > >> since Qubes can't isolate USB controllers during early stages of > >> the boot process. IIRC, Joanna's recommendation is to unplug all > >> USB devices before (re)booting. > >> > >> > > So, leaving that aside, the only remaining option would be to look > > into some log or similar information source to try to find out why > > the scanner appears in sys-usb, but not in dom0 qvm-usb. Any idea > > where to look? > > > > Sorry, no idea. > > P.S. - Franz, would you mind excluding extraneous quoted material from > your replies? In particular, please exclude PGP signatures and generic > Google Groups information included as a signature. > > https://www.qubes-os.org/mailing-lists/#discussion-list-guidelines > > To go along I tried to use the USB controller that was assigned to assignedVM, that worked in the past. But now I am unable to start the assignedVM. The log tells: Icon size: 128x128 invalid PMaxSize for 0x3600015 (32767/32767) invalid PMaxSize for 0x3600015 (32767/32767) invalid PMaxSize for 0x360002b (533/32767) invalid PMaxSize for 0x360002b (533/32767) invalid PMaxSize for 0x360002b (533/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600035 (32767/32767) invalid PMaxSize for 0x3600040 (32767/32767) invalid PMaxSize for 0x360002b (533/32767) invalid PMaxSize for 0x360002b (533/32767) libvchan_is_eof Icon size: 128x128 domain dead Failed to connect to gui-agent Best Fran -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qAu-%2Bp4735bvz-5Lzzu7RWyKKENDCPUt_R1tg5iHypAgQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-03-05 17:56, Franz wrote: > On Sun, Mar 5, 2017 at 10:39 PM, Andrew David Wong >wrote: > >> On 2017-03-05 14:18, Franz wrote: >>> On Sun, Mar 5, 2017 at 5:11 PM, wrote: [...] did it work with it plugged in at boot? >>> did not try that wondering if it may be a security risk >> >> Yes, leaving USB devices plugged in during boot can be a risk, >> since Qubes can't isolate USB controllers during early stages of >> the boot process. IIRC, Joanna's recommendation is to unplug all >> USB devices before (re)booting. >> >> > So, leaving that aside, the only remaining option would be to look > into some log or similar information source to try to find out why > the scanner appears in sys-usb, but not in dom0 qvm-usb. Any idea > where to look? > Sorry, no idea. P.S. - Franz, would you mind excluding extraneous quoted material from your replies? In particular, please exclude PGP signatures and generic Google Groups information included as a signature. https://www.qubes-os.org/mailing-lists/#discussion-list-guidelines - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJYvMvKAAoJENtN07w5UDAwNUsP/0Kv9XmrJtGfBVhfpUAlZ+yC W5Q5njs+d5nnUayHrhH6dAZukMgNYXzlYj+zNiIr3EAdEX6pEFeBuJpRJ57CVItf /nXYenALSlRyiqn1GWqrob2cwuJiaC0XTVpwQLjhd6M/KSCqpj1ZiVWYc82UgF53 ZB0ztgK+ynOk03x6IIdeFlAdwlf84BpPqBuLl82N6bQvLMO01aBYcYoia73hUp2D 1sxH0PlGOLmHMB1dD7us+IOUKArJxf9FRnWeozcyWuin6SrdsJux84oFPT9BGVaO WEGJQKFGTPkZaA2KjktmyE/7lxueoAlaiVbCCA2LZhJgB1EFO/IP8qEzB/vOboBt X9D0k3/X8BSvzqxUX+L9NUeoey7ryorHimR8SdBE1dftOgjTttbapbfAPGl3NSi6 COlYXMTtBAoPDNBnSx1imE9yq+36cmXQExsAAW4U2x0IlJJKqMqUjo4YVohU7/u9 TuRvfRNrRXAZTMM0+kM5FZsUXMhyc5PrF5OgRlMvsbPGCRc8k16DDXLi2oQq/yTO MJEzHaU0WZ3JOmPzR1RjxU19wX9gAggtU4PDc+cGlOTQizVTlsODoc1Y86Otdsta /ZFR7xDc9jP2g6J5eYTfcczFmXvxAUoGqKLTZ+LZ+H+TBrnatk7+iHDY66RCDNjI jt7fDX4K+KDGEdi/u86F =FT4M -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/c412fe7d-d163-d34f-ec64-b2677e8cb352%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
On Sun, Mar 5, 2017 at 10:39 PM, Andrew David Wongwrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > On 2017-03-05 14:18, Franz wrote: > > On Sun, Mar 5, 2017 at 5:11 PM, wrote: > >> [...] did it work with it plugged in at boot? > >> > > did not try that wondering if it may be a security risk > > Yes, leaving USB devices plugged in during boot can be a risk, since > Qubes can't isolate USB controllers during early stages of the boot > process. IIRC, Joanna's recommendation is to unplug all USB devices > before (re)booting. > > So, leaving that aside, the only remaining option would be to look into some log or similar information source to try to find out why the scanner appears in sys-usb, but not in dom0 qvm-usb. Any idea where to look? > - -- > Andrew David Wong (Axon) > Community Manager, Qubes OS > https://www.qubes-os.org > -BEGIN PGP SIGNATURE- > > iQIcBAEBCgAGBQJYvL2rAAoJENtN07w5UDAwQj4P/2tjrBk2wK5mpE7+EEZ4o4ss > Y/EFoEuD/331qI82tHVYvJdDz41HGXdsugZYOR8w4xuQLgDcOCbkOf1sxHk/PgGl > MVIPqHhH/fdapsGkNM30ZjjdotKpeEMi+Bxfo1cglaOzXnvRwuAVlX0l96Aob5EE > 3Y4MnYmUA3simV45hQGMEyfNKZ4mahNVyLTpDglmKZwFdXLYeHcOWm6H8X0FOFS2 > WXBY8UzpIFz0l9XJW9tBuEVnPIHn57m8wxrrQNXxzeaD88h17ZhyVGTbP2jTLSvm > gAbTdZq4y+7Vl4ZeW/mi7Wz+9D406y0JNzJBBGlDXdMpmaVszQ+BxVakrKYs0yZJ > xFWP3p84RF3UH0TYrO1YK709PKP8uLjPoRsviW8UCa9tk5hOSIAs3UMUuZhax6r7 > e9wxYW2+ZryhhlOSx2JPVhj/0zZ9w3enY7sq1RWDKlvQ3SDpsGJ6tX0L3BtGgsQv > /LOZKCH3EY367jUUwt23bDPbllGb/7E6hXwHLFbWbOG2WZejE8NuizboL8uu2EVj > FaEKXOUOQMWPc5lZXLEABgQInTiX0RN/GgK6fCteyTFbffR8IRqY9xe3Xy4ee5ti > JIqRCRcvgfB6K9+JjpLwheCY1Z40DV/fA/sqX6Vh9TIG89ppoF7nMKA/8r83mQZ5 > y+YKmXvDB0Rm6hbe/cSV > =hO24 > -END PGP SIGNATURE- > > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qAFwt2iDGp6kSkFE2OD1wZi68dr77TvND%3Df--KPE09c%3DA%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2017-03-05 14:18, Franz wrote: > On Sun, Mar 5, 2017 at 5:11 PM,wrote: >> [...] did it work with it plugged in at boot? >> > did not try that wondering if it may be a security risk Yes, leaving USB devices plugged in during boot can be a risk, since Qubes can't isolate USB controllers during early stages of the boot process. IIRC, Joanna's recommendation is to unplug all USB devices before (re)booting. - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -BEGIN PGP SIGNATURE- iQIcBAEBCgAGBQJYvL2rAAoJENtN07w5UDAwQj4P/2tjrBk2wK5mpE7+EEZ4o4ss Y/EFoEuD/331qI82tHVYvJdDz41HGXdsugZYOR8w4xuQLgDcOCbkOf1sxHk/PgGl MVIPqHhH/fdapsGkNM30ZjjdotKpeEMi+Bxfo1cglaOzXnvRwuAVlX0l96Aob5EE 3Y4MnYmUA3simV45hQGMEyfNKZ4mahNVyLTpDglmKZwFdXLYeHcOWm6H8X0FOFS2 WXBY8UzpIFz0l9XJW9tBuEVnPIHn57m8wxrrQNXxzeaD88h17ZhyVGTbP2jTLSvm gAbTdZq4y+7Vl4ZeW/mi7Wz+9D406y0JNzJBBGlDXdMpmaVszQ+BxVakrKYs0yZJ xFWP3p84RF3UH0TYrO1YK709PKP8uLjPoRsviW8UCa9tk5hOSIAs3UMUuZhax6r7 e9wxYW2+ZryhhlOSx2JPVhj/0zZ9w3enY7sq1RWDKlvQ3SDpsGJ6tX0L3BtGgsQv /LOZKCH3EY367jUUwt23bDPbllGb/7E6hXwHLFbWbOG2WZejE8NuizboL8uu2EVj FaEKXOUOQMWPc5lZXLEABgQInTiX0RN/GgK6fCteyTFbffR8IRqY9xe3Xy4ee5ti JIqRCRcvgfB6K9+JjpLwheCY1Z40DV/fA/sqX6Vh9TIG89ppoF7nMKA/8r83mQZ5 y+YKmXvDB0Rm6hbe/cSV =hO24 -END PGP SIGNATURE- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/3f0ff02c-1a0c-ce1f-96e4-82481dd2e035%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
On Sun, Mar 5, 2017 at 5:11 PM,wrote: > On Saturday, March 4, 2017 at 8:06:55 PM UTC-5, Francesco wrote: > > On Sat, Mar 4, 2017 at 5:14 PM, wrote: > > > > > > On Saturday, March 4, 2017 at 10:18:18 AM UTC-5, Francesco wrote: > > > > > Hello, > > > > > for the first time I am trying this new feature of Qubes 3.2 with the > idea of using attaching a scanner to a scannerVM. > > > > > > > > > > Fist installed qubes-usb-proxy and simple-scan in the template from > which both sys-usb and scannerVM depend. > > > > > > > > > > Then connected the usb cable and the scanner appeared in sys-usb > terminal: > > > > > user@sys-usb:~$ lsusb > > > > > Bus 003 Device 005: ID 04a9:190f Canon, Inc. > > > > > but > > > > > it does not show in dom0 with > > > > > qvm-usb > > > > > as taught at the end of this document: > > > > > https://www.qubes-os.org/doc/usb/ > > > > > In fact only the webcam appears there. > > > > > > > > > > > > > > > So which is the difference between webcam and scanner? Perhaps that > the webcam was already installed at boot, while the scanner was connected > after? But from a security point of view is it advisable to boot with the > scanner already connected? > > > > > Best > > > > > Fran > > > > > > > > did you install proxy in the usb vm too?> > > > > > > yes > > not sure havent; tried with a scanner only printer. I still print and > scan over network with a raspberry pi that i set up on earlier version of > Qubes. > > > > > > That may be a cleaner way to do that > > > > I;ve gotten android phone to work as single usb device though too. > maybe scanner use some diff protocol or port? > > > > > > > > May be, but it seems strange that qvm-usb does not see it > > > > Best > > > > Fran > > > > > > > > > > > > -- > > > > You received this message because you are subscribed to the Google > Groups "qubes-users" group. > > > > To unsubscribe from this group and stop receiving emails from it, send > an email to qubes-users...@googlegroups.com. > > > > To post to this group, send email to qubes...@googlegroups.com. > > > > To view this discussion on the web visit https://groups.google.com/d/ > msgid/qubes-users/5fe54565-d6f7-4aa3-a61d-28ed0e0cefbb%40googlegroups.com. > > > > For more options, visit https://groups.google.com/d/optout. > > did it work with it plugged in at boot? > > did not try that wondering if it may be a security risk best Fran > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/qubes-users/99c1aacc-d9c2-43ec-b11f-24279246a61c%40googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qBi2JEfw1hOWYDA769hybzfqmNsx6TMx2ONgPFWi-q7bg%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
On Saturday, March 4, 2017 at 8:06:55 PM UTC-5, Francesco wrote: > On Sat, Mar 4, 2017 at 5:14 PM,wrote: > > > On Saturday, March 4, 2017 at 10:18:18 AM UTC-5, Francesco wrote: > > > Hello, > > > for the first time I am trying this new feature of Qubes 3.2 with the idea > > of using attaching a scanner to a scannerVM. > > > > > > Fist installed qubes-usb-proxy and simple-scan in the template from which > > both sys-usb and scannerVM depend. > > > > > > Then connected the usb cable and the scanner appeared in sys-usb terminal: > > > user@sys-usb:~$ lsusb > > > Bus 003 Device 005: ID 04a9:190f Canon, Inc. > > > but > > > it does not show in dom0 with > > > qvm-usb > > > as taught at the end of this document: > > > https://www.qubes-os.org/doc/usb/ > > > In fact only the webcam appears there. > > > > > > > > > So which is the difference between webcam and scanner? Perhaps that the > > webcam was already installed at boot, while the scanner was connected > > after? But from a security point of view is it advisable to boot with the > > scanner already connected? > > > Best > > > Fran > > > > did you install proxy in the usb vm too?> > > > yes > not sure havent; tried with a scanner only printer. I still print and scan > over network with a raspberry pi that i set up on earlier version of Qubes. > > > That may be a cleaner way to do that > > I;ve gotten android phone to work as single usb device though too. maybe > scanner use some diff protocol or port? > > > > May be, but it seems strange that qvm-usb does not see it > > Best > > Fran > > > > > > -- > > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users...@googlegroups.com. > > To post to this group, send email to qubes...@googlegroups.com. > > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/5fe54565-d6f7-4aa3-a61d-28ed0e0cefbb%40googlegroups.com. > > For more options, visit https://groups.google.com/d/optout. did it work with it plugged in at boot? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/99c1aacc-d9c2-43ec-b11f-24279246a61c%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
Re: [qubes-users] Re: Attaching a single USB device to a qube (USB passthrough)
On Sat, Mar 4, 2017 at 5:14 PM,wrote: > On Saturday, March 4, 2017 at 10:18:18 AM UTC-5, Francesco wrote: > > Hello, > > for the first time I am trying this new feature of Qubes 3.2 with the > idea of using attaching a scanner to a scannerVM. > > > > Fist installed qubes-usb-proxy and simple-scan in the template from > which both sys-usb and scannerVM depend. > > > > Then connected the usb cable and the scanner appeared in sys-usb > terminal: > > user@sys-usb:~$ lsusb > > Bus 003 Device 005: ID 04a9:190f Canon, Inc. > > but > > it does not show in dom0 with > > qvm-usb > > as taught at the end of this document: > > https://www.qubes-os.org/doc/usb/ > > In fact only the webcam appears there. > > > > > > So which is the difference between webcam and scanner? Perhaps that the > webcam was already installed at boot, while the scanner was connected > after? But from a security point of view is it advisable to boot with the > scanner already connected? > > Best > > Fran > > did you install proxy in the usb vm too?> yes > not sure havent; tried with a scanner only printer. I still print and > scan over network with a raspberry pi that i set up on earlier version of > Qubes. That may be a cleaner way to do that > I;ve gotten android phone to work as single usb device though too. > maybe scanner use some diff protocol or port? > May be, but it seems strange that qvm-usb does not see it Best Fran > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit https://groups.google.com/d/ > msgid/qubes-users/5fe54565-d6f7-4aa3-a61d-28ed0e0cefbb%40googlegroups.com. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/CAPzH-qDOsiUV2aqRSYOGZvEr%2B5xxNHNqi%3DxeGjO_uQ11PetxXQ%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.