Open all links in specific app qube

[SCBuergel]

I want any link that I click in any app VM to open my browser (e.g. firefox) in my Browser app qube (I don’t want a dispvm because I want to retain my login sessions). E.g. when I click on a link in my Telegram messenger in my Telegram app qube, I want it to be opened in firefox in my Browser app qube.

There is plenty of information here but I find it confusing: I found this Forum User Guide and got confused by a Note linking to this closed unmerged PR. The section on Sample RPC user policy is brief and links to the this blog introducing The New Qrexec Policy System containing a section on the New column syntax including this dead link which seems to have been moved here (but I’m not sure).

Following all of the above, I created (in dom0, not sure though, I guessed that, would be great to state that explicitly) a file called /etc/qubes/policy.d/29-browser.policy (I didnt change this folder otherwise) with the following content:

qubes.OpenURL	*	@anyvm	Browser	allow

But this does not work. I even restarted my entire host system, but clicking on links in Telegram, still open it in the default firefox in the Telegram app qube.

[apparatus]

Follow this guide:

Opening URLs/files in other Qubes

Note: there is an ongoing pull request to add most of the content of this document to the official Qubes OS documentation. This page is about opening URLs and files from one qube in a different qube. The most straightforward way to do this is simply to copy and paste URLs or copy and move files from the source qube to the target qube, then manually open them in the target qube. However, some users might wish to use RPC policies in order to regiment their workflows and safeguard themselves from…

In mybrowser.desktop set Exec to:

Exec=/usr/bin/qvm-open-in-vm -- @default %u

And the policy in dom0 to:

qubes.OpenURL	*	@anyvm	@default	allow target=Browser

But you you can specify the qube name as well without using @default:

Exec=/usr/bin/qvm-open-in-vm -- Browser %u

And:

qubes.OpenURL	*	@anyvm	Browser	allow