admin.vm.Terminal.policy 499 B

123456789101112
  1. ## Note that policy parsing stops at the first match,
  2. ## so adding anything below "$anyvm $anyvm action" line will have no effect
  3. ## Please use a single # to start your custom comments
  4. $anyvm $anyvm deny,target=dom0
  5. # WARNING: The qubes.ShowTerminal service is dangerous and allows any
  6. # qube to access any other qube console. It should be restricted
  7. # only to management/admin qubes. This is why the default policy is 'deny'
  8. # Example of policy: mgmtvm $tag:created-by-mgmtvm allow,target=dom0