Since AppVMs will have their own NetVM-facing neighbor entries, a user
might (correctly) conclud...

This saves an exec call.

If we are using a NAT network namespace, it needs its own neighbor
entries. For consistency, gi...

The input is trusted, but this will help debugging if something goes
wrong.

This is rejected by the kernel.

Some qubesdb-read commands are expected to fail. I ultimately did not
wind up including -e, but...

This allows network traffic to flow even if ARP and NDP do not work or
ave explicitly been disab...

Currently there is just one anti-spoofing firewall rule ensuring packets
coming through vif+ int...

Previously enabling the interface was the first action in the setup
steps. Linux theoretically d...

Check just 10 MiB of the private volume + blkid before considering it
empty and calling mkfs. Av...

We don't have systemd in dom0-provided initrd anymore, so this
workaround is not needed now.

Fi...

fsck may require significant amount of RAM, enable swap earlier to avoid
out of memory condition...

Grub scripts are very persistent in trying to use what is currently
mounted as /. Even if curren...

Fix multiple indentations

* origin/pr/254:
archlinux: improve pacman proxy implementation

* origin/pr/255:
Overwrite .rpmdb for debian updatevm

Fixes QubesOS/qubes-issues#6124
Fixes Q...

Resolves issue where the dom0 rpm database does not get used on
successive calls to qubes-dom0-u...

(cherry picked from commit e07297d3e613a90499a3468a8f95b576898b12e7)

* origin/pr/248:
bind-dirs: run in DisposableVM, too

* origin/pr/247:
passwordless-root: sudo: grant access for group qubes
passwordless-root: po...

* origin/pr/236:
qvm-template: Add qubes.Template{Search,Download} files to the package.
qub...

* origin/pr/246:
Advertise apparmor support

* origin/pr/244:
spec: don't build sysvinit for Fedora and CentOS

This reverts commit 408bccdd5c89a80083261da8c017d1d8487287c2.

* origin/pr/245:
Skip IGD when unbinding device drivers on suspend

QubesOS/qubes-issues#5297

Since no currently supported distribution needs it, skip the build by
default. If necessary, can...

QubesOS/qubes-issues#5940

Allow the user to configure bind-dirs in the dvm template and have that
configuration applied wh...

For consistency with `su` and policykit, grant access to group
qubes rather than user user.

Without this restriction system users can start processes with
root privileges:

$ sudo -u mai...

See QubesOS/qubes-issues#6013

* origin/pr/184:
Add services for paranoid backup restore mode
qfile-unpacker: add option (-...

* origin/pr/239:
xendriverdomain: remove placeholder for sbinpath
Fix regex in qubes-fix-nm-...

On buster and stretch use python-nautilus, but /etc/debian_version
contains numeric version, not...

* origin/pr/242:
tinyproxy: support rsync for Gentoo

Looks like desktop entries doesn`t allow environment variables in Exec string.
qubes.StartApp+q...

Add a pair of services:
1. qubes.RegisterBackupLocation - called by dom0, registers what backup
...

Add -w MARGIN option to always leave at least MARGIN bytes of free
space.

QubesOS/qubes-issues#...

There is only one input, other arguments are files/directories to
extract. There is no need for ...

QubesOS/qubes-issues#930

* origin/pr/240:
package-managers: handle Gentoo

(Dropped debian/changelog change on merge)

See <https://gist.github.com/WillyPillow/b8a643ddbd9235a97bc187e6e44b16e4> for details.

The whole distutils module is a legacy thing in python3. Specifically,
most of it is not install...

Correctly extract packages from transaction items:
- old (pre DNF 4): iterate over item.install...

The https://bugzilla.redhat.com/1650446 is fixed for enough time already
(included in all suppor...

* origin/pr/233:
fixed qubes.GetAppmenus ignoring some correct .desktop files

- clean Makefile

.desktop files can have spaces around '=' symbols; previously
GetAppmenus discarded such files.
...

* origin/pr/231:
Fix missing dependency for managing Network-Manager in active user session

F...

* origin/pr/230:
debian: conditional python version dependencies

QubesOS/qubes-issues#5836

To be used by GUI tools to provide a convenient 'open file manager' shortcut.

references QubesO...

This specifically fixes qvm-console-dispvm tool, which uses
qubes.ShowInTerminal to show the act...

* origin/pr/228:
Override PAM config for su in RPM package
Use pam-configs to override Debia...