laantungir/n_signer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 40 Wiki Activity

v0.0.35 - Update README with qrexec bridge docs, update start_nsigner.sh to support qrexec mode and extra args

Browse Source
This commit is contained in:
Laan Tungir
2026-07-11 11:08:04 -04:00
parent d15eebb80f
commit a39baed82b
6 changed files with 205 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
packaging/qubes/policy.d/40-nsigner.policy
View File

@@ -1,5 +1,10 @@
# Qubes OS qrexec policy for nsigner
# Syntax: service +argument source target action
# Allow specific qubes to reach the signer qube with user confirmation
#
# The ai qube is allowed without a dom0 popup (memory isolation is the
# real security boundary — the signer's own approval prompt in the
# nostr_signer terminal is the operation-level gate).
qubes.NsignerRpc * ai @tag:nsigner-signer allow target=nostr_signer
# Any other qube must get a dom0 confirmation popup.
qubes.NsignerRpc * @anyvm @tag:nsigner-signer ask default_target=nostr_signer
qubes.NsignerRpc * @anyvm @anyvm deny