Copy/paste from dom0 to guest

[mirrorway]

Qubes OS version:

R4.0 rc4

Steps to reproduce the behavior:

1. Do the qubes clipboard copy procedure from dom0.

Expected behavior:

The clipboard copy procedure should work for dom0 -> guest just like it does for guest1 -> guest2.

Actual behavior:

It doesn't work.

General notes:

There's also no right-click qubes-icon > "Copy to Dom0 clipboard" workaround anymore.

Extending the clipboard copy sequence to work with dom0 is more elegant than the right-click menu.

[andrewdavidwong]

@marmarek: What is the intended way to copy text from dom0 in 4.0? Our documentation states that the "Copy to Dom0 clipboard" option should work in 3.2 and newer:

https://www.qubes-os.org/doc/copy-from-dom0/#copypaste-from-dom0

[andrewdavidwong]

@marmarek: What is the intended way to copy text from dom0 in 4.0? Our documentation states that the "Copy to Dom0 clipboard" option should work in 3.2 and newer:

https://www.qubes-os.org/doc/copy-from-dom0/#copypaste-from-dom0

[marmarek]

Indeed the clipboard copy action is gone with stripped down manager. But unifying copy operation is complex.
Should we have yet another icon there? Action in applications menu? Put somewhere into one of current applets (but note that there is no longer separate right-click menu - both right and left click menus are the same).

[marmarek]

Indeed the clipboard copy action is gone with stripped down manager. But unifying copy operation is complex.
Should we have yet another icon there? Action in applications menu? Put somewhere into one of current applets (but note that there is no longer separate right-click menu - both right and left click menus are the same).

[andrewdavidwong]

Well, @mirrorway wants to be able to use the standard inter-VM clipboard keyboard shortcut. IIRC, that option was previously considered and rejected for security reasons. However, I can imagine having an option qubes.guid to enable it (but leaving it disabled by default).

As for the other options, it would probably be most intuitive to have it as an option in whatever's considered the most "global" applet.

[andrewdavidwong]

Well, @mirrorway wants to be able to use the standard inter-VM clipboard keyboard shortcut. IIRC, that option was previously considered and rejected for security reasons. However, I can imagine having an option qubes.guid to enable it (but leaving it disabled by default).

As for the other options, it would probably be most intuitive to have it as an option in whatever's considered the most "global" applet.

[awokd]

The work-around procedure described in that doc does work on R4.0. Just make sure to use -n like echo -n dom0 > qubes-clipboard.bin.source.

[awokd]

The work-around procedure described in that doc does work on R4.0. Just make sure to use -n like echo -n dom0 > qubes-clipboard.bin.source.

[DemiMarie]

In what way is copy from Dom0 a security risk? I cannot see how that creates attack surface.

[DemiMarie]

In what way is copy from Dom0 a security risk? I cannot see how that creates attack surface.

[awokd]

I think it was being able to use the default shortcut (ctrl-alt-c) to do it that was the security risk, not the act itself. Sounds like they are fine with adding something to R4.0 to allow it like in R3.2:

As for the other options, it would probably be most intuitive to have it as an option in whatever's considered the most "global" applet.

[awokd]

I think it was being able to use the default shortcut (ctrl-alt-c) to do it that was the security risk, not the act itself. Sounds like they are fine with adding something to R4.0 to allow it like in R3.2:

As for the other options, it would probably be most intuitive to have it as an option in whatever's considered the most "global" applet.

[andrewdavidwong]

In what way is copy from Dom0 a security risk? I cannot see how that creates attack surface.

The user could have secrets in dom0, e.g., keyfiles or passphrases for automating backups.

[andrewdavidwong]

In what way is copy from Dom0 a security risk? I cannot see how that creates attack surface.

The user could have secrets in dom0, e.g., keyfiles or passphrases for automating backups.