Here is PoC based on
qubesadmin
API which can auto attach USB devices to any VM as required. By default Qubes
auto attaches any device to the sys-usb VM, that helps with bad/malware full
USB devices. But, in special cases, we may want to select special devices to
be auto attached to certain VMs. In this PoC
example, we are
attaching any USB storage device, but, we can add some checks to mark only
selected devices (by adding more checks), or we can mark few vms where no
device can be attached.
I would love to see what all magical ideas you all come up with. Have fun with the code.
Btw, you can execute it in dom0 by
python3 autoattach.py