Standalone isolation?

[vingallo]

By Default are standalone qubes isolated from the the rest of the system, meaning no file access to other vms storage or network or dom0 and malware on standalone is Very hard to pass from standalone to elsewhere ?

Or are there some settings that need to be implemented to achieve that kind of separation for a standalone?

[yanakieff]

It is a self-enclosed OS.

@vingallo

By Default are standalone qubes isolated from the the rest of the system, meaning no file access to other vms storage or network or dom0 and malware on standalone is Very hard to pass from standalone to elsewhere ?

Yes.

@vingallo

Or are there some settings that need to be implemented to achieve that kind of separation for a standalone?

It is as any other VM. Basically template without sharing its root.

Read this, if you haven’t:

Standalones and HVMs