qubes-core-admin-linux/system-config/00-qubes-ignore-devices.rules

# do not edit this file, it will be overwritten on update

ACTION!="remove", SUBSYSTEM=="block", KERNEL=="loop*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"
# ENV{DM_NAME} not available yet
ACTION!="remove", SUBSYSTEM=="block", ATTR{dm/name}=="snapshot-*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"
udev: prevent VM disks content from being accessed by dom0 processes To not expose dom0 processes like blkid for attacks from VM (e.g. by placing malicious filesystem header in private.img). 2014-06-11 00:41:20 +00:00			`# do not edit this file, it will be overwritten on update`

			`ACTION!="remove", SUBSYSTEM=="block", KERNEL=="loop*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"`
			`# ENV{DM_NAME} not available yet`
			`ACTION!="remove", SUBSYSTEM=="block", ATTR{dm/name}=="snapshot-*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"`