Flex:
1&2: I had a look into that but did not try yet as I was afraid of breaching the security of dom0, but if it is the only workaround possible I might take that risk. Would https://www.qubes-os.org/doc/usb-qubes/#automatic-setup do the same? Further I am not sure if that will solve the keyboard layout problem or has a potential to make things worse?
Regarding 1&2 would it be possible to clone the usb-qube and then sort the usb-controllers to both qubes and giving one usb-controller the access to dom0 as described in https://www.qubes-os.org/doc/usb-qubes/#automatic-setup ?
Those automatic setup steps will create a USB qube for you if you chose to not do so on install. However, if sounds like you did, so it won't help to run again. The manual step I linked to permit an external keyboard to dom0 isn't awful from a security perspective, as sys-usb still acts as a middleman between the USB hardware and dom0. It does open up a class of attacks where if your keyboard gets reprogrammed by someone with physical access without your knowledge (or is hopefully not wireless), they could maliciously send keystrokes.
Splitting USB controllers between dom0 and sys-usb is entirely possible, but is arguably less safe than passing the external keyboard through sys-usb, as it exposes dom0 to the USB controller and USB devices attached to it.
Not positive either way about the keyboard layout issue, or the others, sorry.
-- - don't top post Mailing list etiquette: - trim quoted reply to only relevant portions - when possible, copy and paste text instead of screenshots -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/eb11f0ac-2f12-eec9-b5ed-53678f9e3ed7%40danwin1210.me.
