3d803acfde
This ease Admin API administration, and also adds checking if qrexec policy + scripts matches actual Admin API methods implementation. The idea is to classify every Admin API method as either local read-only, local read-write, global read-only or global read-write. Where local/global means affecting a single VM, or the whole system. See QubesOS/qubes-issues#2871 for details. Fixes QubesOS/qubes-issues#2871 |
||
---|---|---|
.. | ||
admin-global-ro | ||
admin-global-rwx | ||
admin-local-ro | ||
admin-local-rwx | ||
generate-admin-policy | ||
qubes.FeaturesRequest.policy | ||
qubes.Filecopy.policy | ||
qubes.GetImageRGBA.policy | ||
qubes.GetRandomizedTime.policy | ||
qubes.NotifyTools.policy | ||
qubes.NotifyUpdates.policy | ||
qubes.OpenInVM.policy | ||
qubes.OpenURL.policy | ||
qubes.UpdatesProxy.policy | ||
qubes.VMShell.policy |