Why appVm has access to my dom0 tray?

It’s probably something stupid, but I’ve installed blueman on my sys-net and it actually appears on my system tray… why/how appVm has access to this?
is there a better way to enable bluetooth mouse?

Any VM is allowed to put an icon there. This is secure because the VMs don’t have direct access to the system tray: Those icons are basically just little windows along with some metadata saying that they’re intended to be displayed as icons, and the Qubes OS GUI protocol will use that information to display them accurately - but always marked with a colored border and/or tint as configured in Qubes Global Settings → Tray icon style.

1 Like