I accidentally ran
sudo qubesctl state.sls qvm.usb-keyboard in dom0 and, according to the docs, dom0 will now be exposed to the USB controllers on boot.
I’d like to undo this command, or at least the exposing dom0 part.
The docs say that I can follow the procedure for removing a USB qube to undo these changes.
However, this procedure also appears to expose dom0 to USB controllers:
Warning: This procedure will result in your USB controller(s) being attached directly to dom0.
I’ve been having problems with sys-usb, so in the end I’d just like to rebuild it using
qubesctl state.sls qvm.sys-usb.
What can I do to revert the changes that Saltstack made to
/etc/qubes-rpc/policy/...? I’ve stored the output of the command so I can see the exact diffs.