Install default policy

While having dom0 package anyway, it doesn't cost much. QubesOS/qubes-issues#531
marmarek · Apr 1, 2016 · 20c95a8 · 20c95a8
1 parent 428f92f
commit 20c95a8
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/Makefile b/Makefile
@@ -1,9 +1,12 @@
 install-vm:
 	install -d $(DESTDIR)/etc/qubes-rpc
-	install qubes-rpc/qubes.USB* $(DESTDIR)/etc/qubes-rpc
+	install qubes-rpc/qubes.USBAttach $(DESTDIR)/etc/qubes-rpc
+	install qubes-rpc/qubes.USBDetach $(DESTDIR)/etc/qubes-rpc
+	install qubes-rpc/qubes.USB $(DESTDIR)/etc/qubes-rpc
 	install -d $(DESTDIR)/usr/lib/qubes
 	install src/usb-* $(DESTDIR)/usr/lib/qubes
 
 install-dom0:
 	python setup.py install -O1 --root $(DESTDIR)
+	install -D -m 0664 qubes-rpc/qubes.USB.policy $(DESTDIR)/etc/qubes-rpc/policy/qubes.USB
 
diff --git a/qubes-rpc/qubes.USB.policy b/qubes-rpc/qubes.USB.policy
@@ -0,0 +1 @@
+$anyvm $anyvm deny
diff --git a/rpm_spec/qubes-usb-proxy-dom0.spec b/rpm_spec/qubes-usb-proxy-dom0.spec
@@ -25,6 +25,7 @@ make install-dom0 DESTDIR=${RPM_BUILD_ROOT}
 
 
 %files
+%attr(0664,root,qubes) %config(noreplace) /etc/qubes-rpc/policy/qubes.USB
 %{python_sitelib}/qubesusbproxy-*.egg-info/*
 %{python_sitelib}/qubesusbproxy
-Original file line number
+Diff line change
@@ Expand Up / @@ -25,6 +25,7 @@ make install-dom0 DESTDIR=${RPM_BUILD_ROOT} @@
     %files
+    %attr(0664,root,qubes) %config(noreplace) /etc/qubes-rpc/policy/qubes.USB
     %{python_sitelib}/qubesusbproxy-*.egg-info/*
     %{python_sitelib}/qubesusbproxy
@@ Expand Down @@