From qubes-devel  Thu Feb 11 16:52:12 2016
From: Joanna Rutkowska <joanna () invisiblethingslab ! com>
Date: Thu, 11 Feb 2016 16:52:12 +0000
To: qubes-devel
Subject: Re: [qubes-devel] Qubes internal network topology
Message-Id: <20160211165212.GF1930 () work-mutt>
X-MARC-Message: https://marc.info/?l=qubes-devel&m=145520954327339

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, Feb 11, 2016 at 01:56:11PM +0000, Andrew wrote:
> Marek Marczykowski-G=C3=B3recki:
> > On Thu, Feb 11, 2016 at 12:20:40PM +0100, Zrubi wrote:
> >> Hi,
> >=20
> >> I want to visualize the internal Qubes network topology.
> >> Is there any better way to get the actual topology than parsing the
> >> output of `qvm-ls -n`
> >=20
> > Unfortunately no, at least not yet. We'd love to have something like
> > that in Qubes Manager in Qubes 4.0, but that's just a wishlist entry
> > for now...
> >=20
> >=20
>=20
> I've made my own hacky script for visualizing network and PCI
> attachments.  Maybe this will tide you over until there's something more
> official?
>=20
> It's not completely bug-free; there is a spacing issue for ProxyVMs, but
> visually I think it looks just fine and haven't had much motivation to
> fix it.
>=20
> Pic with redactions attached.
>=20
> Andrew
>=20

Hate to break it to you, but you're not quarantining ME by assigning the ME=
 host
controller device to a VM, as seen on your screenshot. This device is a mer=
e
interface for the OS to talk to the ME, but ME is still free to do whatever=
 DMA
it wants. Sorry. I once believed this would work too... :/

joanna.
-----BEGIN PGP SIGNATURE-----
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=3DfMCP
-----END PGP SIGNATURE-----

--=20
You received this message because you are subscribed to the Google Groups "=
qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to qubes-devel+unsubscribe@googlegroups.com.
To post to this group, send email to qubes-devel@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/=
qubes-devel/20160211165212.GF1930%40work-mutt.
For more options, visit https://groups.google.com/d/optout.