Home Explore Help
Sign In
Qubes
/
core-admin
2
0
Fork 0
Files Issues 0 Pull Requests 0 Wiki
Branch: master
Branches Tags
core-admin
/
qubes-rpc-policy
/
85-admin-backup-restore.policy

85-admin-backup-restore.policy 2.1 KB
Permalink History Raw

1234567891011121314151617181920212223242526 
  1. ## File format:
    2. 

  2. ## service-name|*       +argument|* source                   destination                     action  [options]
    3. 

  3. 

  4. ## Allow selected DisposableVM perform "paranoid backup restore"
    5. 

  5. admin.vm.Create.AppVM                      *   @tag:backup-restore-mgmt dom0                 allow target=dom0
    6. 

  6. admin.vm.Create.StandaloneVM               *   @tag:backup-restore-mgmt dom0                 allow target=dom0
    7. 

  7. admin.vm.Create.TemplateVM                 *   @tag:backup-restore-mgmt dom0                 allow target=dom0
    8. 

  8. admin.vm.List                              *   @tag:backup-restore-mgmt dom0                 allow target=dom0
    9. 

  9. ## Allow checking some basic info about all the VMs, to propose conflicts resolution
    10. 

  10. admin.vm.List                              *   @tag:backup-restore-mgmt @anyvm               allow target=dom0
    11. 

  11. admin.vm.property.Get  +provides_network       @tag:backup-restore-mgmt @anyvm               allow target=dom0
    12. 

  12. admin.vm.property.Get  +template_for_dispvms   @tag:backup-restore-mgmt @anyvm               allow target=dom0
    13. 

  13. 

  14. ## Allow it to configure just created qubes
    15. 

  15. admin.vm.feature.Set            *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    16. 

  16. admin.vm.firewall.Set           *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    17. 

  17. admin.vm.property.Set           *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    18. 

  18. admin.vm.tag.Set                *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    19. 

  19. admin.vm.volume.Import          *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    20. 

  20. admin.vm.volume.Info            *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    21. 

  21. admin.vm.volume.List            *   @tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    22. 

  22. admin.vm.volume.Set.revisions_to_keep   *	@tag:backup-restore-mgmt @tag:backup-restore-in-progress allow target=dom0
    23. 

  23. 

  24. ## And finally, allow it to retrieve the actual backup
    25. 

  25. qubes.RestoreById               *   @tag:backup-restore-mgmt @tag:backup-restore-storage     allow
    26. 

  26.