Considering this, or any other source not mentioned, is it possible to get a policy rule that would trigger specific qube to open/edit the file that is double-clicked in the source qube?
I know I can do it manually via setting default app for the given file type in a source qube, but when having over hundred of qubes, customizing each of them for each file type I am interested in, it is undoubtedly overkilling…
Why just not using xfce dvm template to open all the files?
Because I am compartmentalizing and I have different minimal templates for different purposes, thus reducing attack surface. Not using xfce at all.
This has come up before - the answer is no, I think not.
What you can do is roll a helper script that will provide access to
different qubes depending on the filetype. I’ve done this before and
it’s straight forward.
As to rolling out over hundreds of qubes, that’s quite straight forward
too. Ideally you would do this before creating those hundreds. If you
already have them, salt the change at template and qube level. It will
take a while.
If you dont want to do that you could put the script in your
disposable template, so that the initial disposable target spawns
another disposable depending on the file type. Two disposables spawned
to provide the separation you want. That may be acceptable.
I never presume to speak for the Qubes team.
When I comment in the Forum I speak for myself.