On Mon, Jul 08, 2019 at 07:24:53PM +0000, Jon deps wrote: > On 7/3/19 8:50 PM, 'awokd' via qubes-users wrote: > > Jon deps: > > > > > https://www.qubes-os.org/doc/disposablevm-customization/#using-static-disposablevms-for-sys- > > > > > > > > > > > > I can't really understand what the differences would be?? with a static > > > dispvm (based on a dispvm-template)???? vs?? just a regular?? sys-net > > > > > > if nothing is disposed (static) isn't it just the same > > > > > "Static" there refers to the name and VM configuration, not the > > contents. You only have to set them up once, not every time. > > > > > so making a sys-net2 as a -C DispVM (with persistent PCI tag) based on a > custom-dispvm-template has more disposable qualities than > > just an appvm based on say Deb-9 template ? > > > and hence might be a security protocol to make and toss sys-net2 (dispvm) > from time to time or > > is it very minor and not worth the effort? >
Do you use DisposableVMs instead of a standard appVM? Why? If you see an advantage there, then you should see advantage in using them for sys-. Since the effort is minimal I'd recommend. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20190709001544.nvcp7x6icefqj6gv%40thirdeyesecurity.org. For more options, visit https://groups.google.com/d/optout.
