Re: [qubes-users] Re: How do you maximize your VM security?

2020-06-10 Thread palette999
> > > > > 1) Is there a resource out there that teaches newbies how to configure > minimal templates for different uses? e.g. For VPN, services, apps, etc. > > you can find some user setups with configuration examples here: https://github.com/Qubes-Community/Contents/tree/master/docs/user-setup

[qubes-users] Re: How do you maximize your VM security?

2020-06-10 Thread fiftyfourthparallel
> > Hi > > Changing the hostname is interesting especially for laptop. When you are > connecting to any network, your hostname is sent with your MAC address to > the DHCP server thus leaving a trace in the log of your presence on that > network. Also, the sys-net hostname is very unique and sta

[qubes-users] Re: How do you maximize your VM security?

2020-06-10 Thread Dominique
On Wednesday, June 10, 2020 at 8:09:23 AM UTC-4, fiftyfour...@gmail.com wrote: > > On Wednesday, 10 June 2020 00:26:01 UTC+8, Dominique wrote: >> >> Hi, >> >> First step for me was to install the minimal template and use them >> instead of the complete template for service qubes (sys-net, sys-U

Re: [qubes-users] Re: How do you maximize your VM security?

2020-06-10 Thread fiftyfourthparallel
> > 1st, I second all of this. > 2nd, I run a VPN off of the minimal template (technically a double vpn, > but it's probably overkill) > 3rd, on my todo list, create a scratch template with even less than the > minimal for these functions > 4th, only wired networking bc all the insecurity regard

[qubes-users] Re: How do you maximize your VM security?

2020-06-10 Thread fiftyfourthparallel
On Wednesday, 10 June 2020 00:26:01 UTC+8, Dominique wrote: > > Hi, > > First step for me was to install the minimal template and use them instead > of the complete template for service qubes (sys-net, sys-USB and > sys-firewall). Information on minimal template can be found here: > https://www.

[qubes-users] Re: How do you maximize your VM security?

2020-06-10 Thread fiftyfourthparallel
Hi Dominique, Thanks for the reply. So I take it you chose Mirage because a unikernel firewall has a smaller attack surface compared to full-blown Linux? I'm a newbie, so I'm not even sure if these are IDS/IPS, but I'm thinking of installing the tried-and-true trio of rkhunter, lynis, chkrootk

RE: [qubes-users] Re: How do you maximize your VM security?

2020-06-09 Thread sysad.andes
Original message From: Dominique Date: 6/9/20 12:26 (GMT-05:00) To: qubes-users Subject: [qubes-users] Re: How do you maximize your VM security? On Tuesday, June 9, 2020 at 11:26:22 AM UTC-4, fiftyfour...@gmail.com wrote:Hi all,I took a break from setting up my Qubes OS

[qubes-users] Re: How do you maximize your VM security?

2020-06-09 Thread Dominique
Hi, First step for me was to install the minimal template and use them instead of the complete template for service qubes (sys-net, sys-USB and sys-firewall). Information on minimal template can be found here: https://www.qubes-os.org/doc/templates/minimal/ Second step for me was building and