Consider changing qubes.VMShell DispVM default to "ask"

[andrewdavidwong]

On 2016-08-25 03:53, Arqwer wrote:

Command qvm-run '$dispvm' xterm if called from an appVM will run xterm in a
new dispVM. If attacker gained access to an appvm, he possibly can run
script, that will create thousands of new dispVMs and freeze my computer. I
don't like this. May be it's better to disable this functionality by default?

Users can already configure this by editing /etc/qubes-rpc/policy/qubes.VMShell and changing

$anyvm   $dispvm  allow

to

$anyvm   $dispvm  ask

I interpret the suggestion to be that we make "ask" the default (instead of the current "allow").