Where is the config file of the device attachment policy?

[rustybird]

The device attachment policy is stored in the devices_denied property of the specific VM:

$ qvm-prefs VMNAME devices_denied

@HardcodedNonce

I would like to disallow any qube tagged “internal” from accepting any USB devices

I don’t think that’s possible.