suzanne.soy/qubes-doc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

clarify sys-firewall dispvm

Browse Source
This commit is contained in:
awokd 2018-05-04 11:05:28 +00:00 committed by GitHub
parent b88d74c7b0
commit 4536d0b693
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
customization/dispvm-customization.md
View File

@ -61,7 +61,8 @@ It is possible to change the settings for each new Disposable VM (DispVM). This
You can use a static DispVM for `sys-*` as long as it is stateless. You can use a static DispVM for `sys-*` as long as it is stateless.
For example, a `sys-net` using DHCP or `sys-usb` will work. For example, a `sys-net` using DHCP or `sys-usb` will work.
`sys-firewall` will also work unless you have custom rules set, because per VM rules are stored in a configuration file inside the firewall AppVM. In most cases `sys-firewall` will also work, even if you have configured AppVM firewall rules.
The only exception is if you require something like VM to VM communication and have manually edited `iptables` or other items directly inside the firewall AppVM.
To create one that has no PCI devices attached, such as for `sys-firewall`: To create one that has no PCI devices attached, such as for `sys-firewall`: