Qubes Hardening General

Yes just trying to modify Xen and QubesOS to specific use cases; it looks like that’s what MirageOS, OCaml and Opam are for.

Is the QubesOS #qubes IRC channel still active?

1 Like

6 posts were split to a new topic: #qubes IRC channel

What about the application containerization that not only the VMName next to it, but also have the container ID with hexadecimal with random numbers of characters?

Are you suggesting a sort of functional package manager for Qubes templates and AppVMs? That sounds

similar to Nix where the package dependencies are explicitly defined and then hashed.

What I mean is that instead of this:

[sys-usb] Parole Media Player

just be like this:

[sys-usb] [C-5e3c9a9d4f4b88] Parole Media Player

Something similar to that, and if we open the same program in the same qubes, it would something look like this:

[sys-usb] [C-222fae668fbccd118] Parole Media Player

As a random container ID hash on the application window title.

Did you understand that?

yes; the purpose of the hash being to detect any change of state?

possibly