From 30c2d9934ad8053151fb12156bb44cf542746472 Mon Sep 17 00:00:00 2001
From: Yukikoo <me@neowutran.ovh>
Date: Sun, 11 Aug 2019 16:20:56 +0000
Subject: [PATCH] Add info about RPC policies for disposableVM

Related to https://github.com/QubesOS/qubes-issues/issues/5235
---
 user/common-tasks/disposablevm.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/user/common-tasks/disposablevm.md b/user/common-tasks/disposablevm.md
index ec8b855b..5a9f86d9 100644
--- a/user/common-tasks/disposablevm.md
+++ b/user/common-tasks/disposablevm.md
@@ -153,6 +153,15 @@ $ qvm-open-in-vm @dispvm:online-dvm-template https://www.qubes-os.org
 
 This will create a new DisposableVM based on `online-dvm-template`, open the default web browser in that DisposableVM, and navigate to `https://www.qubes-os.org`.
 
+#### Example of RPC policies to allow this behavior
+
+In dom0, add the following line to `/etc/qubes-rpc/policy/qubes.OpenURL`
+~~~
+$anyvm @dispvm:online-dvm-template allow
+~~~
+
+More information about RPC policies for disposableVM can be found here: `https://www.qubes-os.org/doc/qrexec3/#extra-keywords-available-in-qubes-40-and-later`
+
 
 ## Customizing DisposableVMs ##