in order to not install something in dom0, i’m trying to give read only permissions to a single non-networked qube with a application in it. (qubes-core-admin-client qubes-manager and python3-qrexec are installed in the template)
running:
qrexec-policy-graph --include-ask
in the qube returns a error that does not throw a policy violation notification. Is there a equivilant qubes-something command that would return the same information via the admin API?
If your wondering, the error is:
Traceback (most recent call last):
File "/usr/bin/qrexec-policy-graph", line 5, in <module>
sys.exit(main())
File "/usr/lib/python3/dist-packages/qrexec/tools/qrexec_policy_graph.py", line 125, in main
system_info = utils.get_system_info()
File "/usr/lib/python3/dist-packages/qrexec/utils.py", line 119, in get_system_info
system_info = qubesd_call("dom0", "internal.GetSystemInfo")
File "/usr/lib/python3/dist-packages/qrexec/utils.py", line 80, in qubesd_call
client_socket.connect(socket_path)
FileNotFoundError: [Errno 2] No such file or directory