In the past I've read in the docs about the way to isolate the root account in VMs using PolKit.
I was wandering if there is a way to always prompt Dom0 for authorization for some specific operations inside VMs, like a syscall, using policies or better modifying the kernel. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/835b852a-a99c-4510-9ea8-9976043444d1%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
