New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dom0 should not have USB drivers #3801

Closed
DemiMarie opened this Issue Apr 8, 2018 · 2 comments

Comments

Projects
None yet
3 participants
@DemiMarie

Qubes OS version:

R4.0

Affected component(s):

Dom0 Kernel


Steps to reproduce the behavior:

Run find /lib/modules/4.14.18-1.pvops.qubes.x86_64/kernel/drivers/usb

Expected behavior:

No output or an error that the directory does not exist

Actual behavior:

Lots of output

General notes:

Dom0 does not need USB drivers, and they increase attack surface in the event of a misconfiguration.


Related issues:

@marmarek

This comment has been minimized.

Show comment
Hide comment
@marmarek

marmarek Apr 8, 2018

Member

Dom0 does not need USB drivers, and they increase attack surface in the event of a misconfiguration.

This is not true. Using USB VM is optional. Also Anti-Evil-Maid, or simply having the system installed on USB disk require USB in dom0.

Member

marmarek commented Apr 8, 2018

Dom0 does not need USB drivers, and they increase attack surface in the event of a misconfiguration.

This is not true. Using USB VM is optional. Also Anti-Evil-Maid, or simply having the system installed on USB disk require USB in dom0.

@marmarek marmarek closed this Apr 8, 2018

@DemiMarie

This comment has been minimized.

Show comment
Hide comment
@DemiMarie

DemiMarie Apr 8, 2018

@marmarek I did not think of that configuration.

@marmarek I did not think of that configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment