Patrick Schleizer 5 years ago
parent
commit
fbdf460db8
1 changed files with 6 additions and 0 deletions
  1. 6 0
      qubes-rpc-policy/qubes.UpdatesProxy.policy

+ 6 - 0
qubes-rpc-policy/qubes.UpdatesProxy.policy

@@ -3,7 +3,13 @@
 
 ## Please use a single # to start your custom comments
 
+# Upgrade all TemplateVMs through sys-whonix.
+#$type:TemplateVM $default allow,target=sys-whonix
+
+# Upgrade Whonix TemplateVMs through sys-whonix.
 $tag:whonix-updatevm $default allow,target=sys-whonix
+
+# Deny Whonix TemplateVMs using UpdatesProxy of any other VM.
 $tag:whonix-updatevm $anyvm deny
 
 # Default rule for all TemplateVMs - direct the connection to sys-net