On Wednesday, January 8, 2020 at 6:19:54 AM UTC-5, Ryan Tate wrote:
>
> Does qubes block USB data on Thunderbolt ports? 
>

So a few things:

1. Qubes has pcie hotplug disabled in the dom0 kernel, which TB uses for 
PCIe-based thunderbolt devices. This is disabled for security reasons.
2. The TB alternate mode that supports USBs might not instantiate the PCIe 
USB controller it connects through *until a USB device is connected to that 
port*.
3. Therefore...depending on BIOS support...you *might* be able to have a 
USB device seen by qubes if the USB device is plugged in at power-on. Even 
if that works, it might be on a USB PCIe controller that is not already 
attached to your sys-usb (if you have one).
4. If it does work, you might want to create a sys-usb-c which you run only 
after connecting a device to the port at boot time, and assign the (usually 
hidden) PCIe USB controller that that VM only.

Brendan

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/0cbd5089-ce29-4c13-9d9f-d40ff678e95a%40googlegroups.com.

Reply via email to