[qubes-users] Is it possible to run browser and other "chatty" applications as dedicated users in appvm?

2017-01-30 Thread Jane Jok
Hello! I'd like to ask if it is possible to run certain applications (notably, browser) as dedicated users in appvm ? I know that Qubes security model doesn't rely on users system for security, but combined with iptables, this could prevent traffic leaks when running certain "wonky" VPN config

Re: [qubes-users] Is it possible to run browser and other "chatty" applications as dedicated users in appvm?

2017-01-30 Thread Garrett Robinson
On 01/30/2017 11:21 AM, Jane Jok wrote: > I know that Qubes security model doesn't rely on users system for security, > but combined with iptables, this could prevent traffic leaks when running > certain "wonky" VPN configs (for instance, ipsec based VPNs where a tun > device is absent) by stra

Re: [qubes-users] Is it possible to run browser and other "chatty" applications as dedicated users in appvm?

2017-01-30 Thread Jane Jok
On Monday, January 30, 2017 at 10:25:48 PM UTC+3, Garrett Robinson wrote: > On 01/30/2017 11:21 AM, Jane Jok wrote: > > > I know that Qubes security model doesn't rely on users system for security, > > but combined with iptables, this could prevent traffic leaks when running > > certain "wonky"

Re: [qubes-users] Is it possible to run browser and other "chatty" applications as dedicated users in appvm?

2017-01-31 Thread Unman
On Mon, Jan 30, 2017 at 11:36:37AM -0800, Jane Jok wrote: > On Monday, January 30, 2017 at 10:25:48 PM UTC+3, Garrett Robinson wrote: > > On 01/30/2017 11:21 AM, Jane Jok wrote: > > > > > I know that Qubes security model doesn't rely on users system for > > > security, but combined with iptables,