On Sunday, August 9, 2020 at 10:07:25 PM UTC+2 awokd wrote: > 'Антон Чехов' via qubes-users: > > > I have a handful ob Yubikeys (v.2 to v.4) and I really want to make use > of > > them with Qubes as well. So the next thing will be U2Fproxy and > > YubikeyLogin. > > There is some weird (?) behavior when attaching a Yubikey and the > > Personalization Tool in sys-usb is open. The key is recognized but I get > a > > never-ending loop of warnings: "Denied: qubes.InputKeyboard > > Denied qubes.InputKeyboard from sys-usb to dom0" > > > > I think that this is the right behavior but as long as I switch to the > > Personalization Tool these warnings never stop. Elsewhere I get this > > warning just the one time when I plug the key in. > > From > https://www.qubes-os.org/doc/usb-qubes/#enable-a-usb-keyboard-for-login > under Manual setup, I wonder if you can edit > /etc/qubes-rpc/policy/qubes.InputKeyboard to something like sys-usb > sys-usb ask,default_target=sys-usb. Should be more documentation on that > file somewhere out there. > > -- > - don't top post > Mailing list etiquette: > - trim quoted reply to only relevant portions > - when possible, copy and paste text instead of screenshots >
Sorry for the late response. I tried that but the warning remained. Thinking a while about it I am of the opinion that it wasn't bad seeing this message. It only shows up once when plugging in a Yubikey (or I guess any device that is recognized as a keyboard) together with the message that a Yubikey is available. I don't need the Personalization Tool very often. On the contrary, once the slots are configured they usually stay that way for a long time. My conclusion for now is, that I can live with this message. Or is this not the expected behavior? What do you think about it? It may be connected with some policy file for the Yubikey but I don't know and didn't have the time to seriously investigate these policy files & documentation. I am thinking about setting up 'sys-usb' as a disposable VM along the lines of the following documentation. https://www.qubes-os.org/doc/disposablevm-customization/ Have you or others tried that out and is this documentation up to date? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/a495d0a9-9845-48f0-946c-f40b3f538762n%40googlegroups.com.
