From cc8aeead5a4cb8e56995e61313019161e9a39ba8 Mon Sep 17 00:00:00 2001 From: Jean-Philippe Ouellet Date: Sat, 24 Dec 2016 13:39:23 -0500 Subject: [PATCH] Prefer well defined "disposable" over "throwaway" --- services/qrexec3.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/services/qrexec3.md b/services/qrexec3.md index cdc91150..e1d28aeb 100644 --- a/services/qrexec3.md +++ b/services/qrexec3.md @@ -155,7 +155,7 @@ Be very careful when coding and adding a new rpc service. Unless the offered functionality equals full control over the target (it is the case with e.g. `qubes.VMShell` action), any vulnerability in a rpc server can be fatal to Qubes security. On the other hand, this mechanism allows to -delegate processing of untrusted input to less privileged (or throwaway) +delegate processing of untrusted input to less privileged (or disposable) AppVMs, thus wise usage of it increases security. ### Extra keywords available in Qubes 4.0 and later