Security implications of setting non-networking service qubes to to Provides network

[solene]

@aaaaaaa

Would it make the qube more “available” to other compromised qubes in a theoretical scenario?

This allows you to use sys-audio as the netvm of other qubes. And sys-audio certainly has access to your USB controllers, so if you plug an USB network device, this may expose a qube whose netvm is sys-audio to this device.

So, as long as you do not use sys-audio as a netvm, it’s fine to me.

By the way, sys-usb provides network in the default installation.