Advertisements
Below you will find the commands we used to enable the sys-usb VM (on an installation of Qubes 3.2 where it was not enabled by default nor was the task of handling USB devices assigned to sys-net).
On dom0 terminal emulator, we executed the following first to enable sys-usb.
sudo qubesctl top.enable qvm.sys-usb; sudo qubesctl state.highstate;
Then we modified the configuration files for the mouse (/etc/qubes-rpc/policy/qubes.InputMouse) and keyboard (/etc/qubes-rpc/policy/qubes.InputKeyboard) so that they will automatically be granted to dom0 without prompting the used each time.
We modified the content /etc/qubes-rpc/policy/qubes.InputMouse and /etc/qubes-rpc/policy/qubes.InputKeyboard to be as below:
sys-usb dom0 allow,user=root $anyvm $anyvm deny