Disable speaker output for domUs by default #2724
Description
Metadata
Metadata
Assignees
Labels
This issue pertains to audio in Qubes OS.Priority: default. Default priority for new issues, to be replaced given sufficient information.A pull request has been submitted for this issue.This issue pertains to privacy in Qubes OS or something controlled by the Qubes OS Project.This issue pertains to the security of Qubes OS.This issue pertains to the user experience (UX) in Qubes OS.
To prevent them from communicating to other mic-equipped devices and deanonymizing the user. (Note we do not expose mic to any AppVM by default since forever.)
Seems like we can easily do that during installation via Salt config. But maybe consider also some runtime check to ensure this also (in Qubes 4.x)?
/cc @adrelanos