From 1a01417994c41331266f5c405084eafbd4eaebe2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Mon, 19 Feb 2018 02:27:32 +0100
Subject: [PATCH] qubespolicy: unify calling qrexec service

Rely on qrexec-client resolving QUBESRPC keyword, same as in case of VM
call. This will allow applying special treatment to such calls, like
calling qubes-rpc-multiplexer directly (avoiding shell), because we have
defined protocol what can be used here.
---
 qrexec/qrexec-policy | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/qrexec/qrexec-policy b/qrexec/qrexec-policy
index db6dde4..a4058d5 100755
--- a/qrexec/qrexec-policy
+++ b/qrexec/qrexec-policy
@@ -119,7 +119,7 @@ def do_execute(domain, target, user, service_name, process_ident, vm=None):
         if isinstance(vm, qubes.qubes.QubesVm):
             spawn_target_if_necessary(vm)
         if target == "dom0":
-            cmd = QUBES_RPC_MULTIPLEXER_PATH + " " + service_name + " " + domain
+            cmd = "QUBESRPC " + service_name + " " + domain
         else:
             cmd = user + ":QUBESRPC "+ service_name + " " + domain
         # stderr should be logged in source/target VM