Fully immutable qubes with whitelist of persistent folders

[deeplow]

@m.cortez

I did look up, what is stored in bind-dirs , but could not find /home/user to exclude. The home dirs seem to be mounted in a different way than with bind-dirs (if I understand you correctly).

By excluding /home/user/ I assumed it would just be removing it from bind-dirs but as you state, apparently it is not this way. Then I don’t know what could be the solution.

@m.cortez

Is this a “reasonable” approach? I think, something like this also would be an interesting automated Qubes OS-feature to have in app qubes.

My hunch is that there is a better way. But I don’t know too much about this, I’m afraid. Hoping someone else can chip in.