core-admin/qubes-rpc-policy
Marek Marczykowski-Górecki 3d803acfde
Generate policy for Admin API calls based on annotations on actual methods
This ease Admin API administration, and also adds checking if qrexec
policy + scripts matches actual Admin API methods implementation.
The idea is to classify every Admin API method as either local
read-only, local read-write, global read-only or global read-write.
Where local/global means affecting a single VM, or the whole system.

See QubesOS/qubes-issues#2871 for details.

Fixes QubesOS/qubes-issues#2871
2017-07-04 04:27:34 +02:00
..
admin-global-ro Generate policy for Admin API calls based on annotations on actual methods 2017-07-04 04:27:34 +02:00
admin-global-rwx Generate policy for Admin API calls based on annotations on actual methods 2017-07-04 04:27:34 +02:00
admin-local-ro Generate policy for Admin API calls based on annotations on actual methods 2017-07-04 04:27:34 +02:00
admin-local-rwx Generate policy for Admin API calls based on annotations on actual methods 2017-07-04 04:27:34 +02:00
generate-admin-policy Generate policy for Admin API calls based on annotations on actual methods 2017-07-04 04:27:34 +02:00
qubes.FeaturesRequest.policy qubes/tools/qvm-features: add tool for managing qvm-features 2016-05-19 03:02:24 +02:00
qubes.Filecopy.policy Move all files one level up 2013-03-16 19:56:51 +01:00
qubes.GetImageRGBA.policy qubes-rpc-policy/qubes.GetImageRGBA.policy 2014-05-20 17:49:20 +02:00
qubes.GetRandomizedTime.policy implemented dom0 qubes.GetRandomizedTime 2016-03-13 01:15:46 +00:00
qubes.NotifyTools.policy Allow HVM to notify dom0 about tools installation 2013-10-28 05:09:54 +01:00
qubes.NotifyUpdates.policy Move all files one level up 2013-03-16 19:56:51 +01:00
qubes.OpenInVM.policy allow sys-whonix, whonix-gw and whonix-ws by default to open links in anon-whonix 2016-04-27 17:43:31 +00:00
qubes.OpenURL.policy Add policy for qubes.OpenURL service 2016-05-18 02:03:48 +02:00
qubes.UpdatesProxy.policy Add default policy for qubes.UpdatesProxy service 2017-05-26 15:08:19 +02:00
qubes.VMShell.policy qubes.VMShell.policy: extend comment 2014-05-07 15:34:59 +02:00