I edited etc/quabes-rpc/policy/qubes.InputKeyboard so it says sys-usb dom0 allow $anyvm $anyvm deny (I had deleted the second line, but then put it back. I may have mistyped it when I put it back, I didn’t back it up before the edit.) I am also using a USB mouse that is ergonomic. Although I h…

[image] crkorg: I do not understand if what I did now with giving the USB keyboard dom0 access allows someone who has hacked the sys-usb hub via the ethernet which is attached to access dom0 right away or if sys-usb is only letting the keyboard and mouse have access. If sys-usb is compromised…

[image] adw: If sys-usb is compromised, then there’s no practical difference between the two. Dom0 cannot tell whether keystrokes are coming from a malicious process running in sys-usb or your physical keyboard, since that keyboard has to “go through” sys-usb in order to reach dom0. So based …

I read this before and wasn’t sure my intelligence level/working memory was enough to understand or implement it. It looks like on the 16th post you may have elucidated the instructions in a way I might be able to understand. Can I just start at the 16th post? For my USB template, I use a fedora m…

[image] crkorg: I may have multiple usb controllers, could I get around this? If you have multiple USB controllers, then you can designate one of them exclusively for the keyboard (and perhaps also the mouse): https://www.qubes-os.org/doc/usb-qubes/#qubes-41-how-to-enable-a-usb-keyboard-on-a…

When I type qvm-pci | grep “USB controller” it shows 3 controllers listed. I also have three USB ports. I am unsure if this indicates that I have 3 controllers. One controller is made by a graphics card company, which I don’t understand.

I have no idea, but in my experience, the odds are slim-to-none that a mainstream computer natively has three separate USB controllers for each of its three USB ports.

qvm-pci | grep “USB controller” lists 3 things: -Intel USB 3.1 xHCI Host controller -NVIDIA USB 3.1 Host Controller -Intel Thunderbolt 3 USB Controller I created multiple USB qubes and attached each controller to each qube. All three of my USB ports are enabled when I attach the first controller…

Did you see my reply at the end of this post? I have 3 usb controllers, but I am not sure what to do from here.

Okay, I just did a test. I have three USB “devices” in my sys-usb’s Devices tab, so I created three sys-usbs and assigned one to each, then I tried plugging devices into each physical port to see which sys-usb they showed up in. The result is that all the physical ports except for the Thunderbolt po…

Ergonomic USB keyboard with dom0 access: bad idea?

User Support

tanky0u February 27, 2023, 6:02pm 2

My advice would be cloning the existing sys-usb (let’s call it “usb-keyboard” qube) and attach the keyboard to that and then pass it to the dom0. Check my thread on this: