I recently upgraded 1 of my Qubes boxes to 4.3. I had been having an issue where the WM would die under 4.2.4 on this particular box every time I used my KVM to toggle between boxes. I was hoping that fresh install of 4.3 would correct the situation.
I installed 4.3, but have a new complication. It may be as a result of my choices during install, but 4.3 asks me to confirm that I want to use my USB keyboard and mouse with the system upon every boot.
I could live with the confirmation step upon boot, but it also goes through the confirmation step after each KVM switch. So every time I switch out and back to my 4.3 box, I have to tab, tab, tab, enter for each device.
Is there anyway to tell sys-usb to not ask for a confirmation on every boot/KVM switch? I have sys-usb setup to use a DVM and suspect this might be the source of the issue. Perhaps there is no way for the permission to use device xx to persist when using a DVM?
How can I get around this (I am fine with moving off a DVM for sys-usb if required)?
OK, a quick update. I poked around a bit and figured out that adding a policy file to override the qrexec policy for this aspect fixes the issue. I am fixing it by turning off the nag and confirmation. I monitored the journal in dom0 to determine what the source of this was.
What I did was add a policy file (49-config-input.policy) with a lower number than the default policy file (50-config-input.policy) to override the policy.
The file I added contains only:
qubes.InputMouse * sys-usb dom0 allow
This gets rid of the nag for both mouse and keyboard upon KVM toggle.
I consider this solved, but the powers that be can weigh in if this was the right approach.
Thanks for pointing this out. I have reverted my changes and used the GUI tool. Interestingly the tool noticed my addition and warned that it may override any changes made in the tool.
