Rpc policy with tag not working

[questenerie]

i have a set of qubes with a tag placed on them let’s call it mytag

my custom qubes.Filecopy policy has this

# /etc/qubes/policy.d/00-config-filecopy.policy
qubes.Filecopy * @anyvm @tag:mytag deny

i verify with qvm-tags myqube that it has mytag, but when i try to copy a file i still see it in the selection menu if it is also a disposable template

it will show “Disposable VM (myqube)” – how can i make the rule also deny for those?

[rustybird]

@questenerie

i verify with qvm-tags myqube that it has mytag, but when i try to copy a file i still see it in the selection menu if it is also a disposable template

it will show “Disposable VM (myqube)” – how can i make the rule also deny for those?

Add a second rule:

qubes.Filecopy * @anyvm @dispvm:@tag:mytag deny