qubes.UpdatesProxy.policy 622 B

123456789101112131415161718
  1. ## Note that policy parsing stops at the first match,
  2. ## so adding anything below "$anyvm $anyvm action" line will have no effect
  3. ## Please use a single # to start your custom comments
  4. # Upgrade all TemplateVMs through sys-whonix.
  5. #$type:TemplateVM $default allow,target=sys-whonix
  6. # Upgrade Whonix TemplateVMs through sys-whonix.
  7. $tag:whonix-updatevm $default allow,target=sys-whonix
  8. # Deny Whonix TemplateVMs using UpdatesProxy of any other VM.
  9. $tag:whonix-updatevm $anyvm deny
  10. # Default rule for all TemplateVMs - direct the connection to sys-net
  11. $type:TemplateVM $default allow,target=sys-net
  12. $anyvm $anyvm deny