From d246b84912746907baa3ead63840b585e1f65697 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Marek=20Marczykowski-G=C3=B3recki?=
 <marmarek@invisiblethingslab.com>
Date: Wed, 18 Mar 2015 20:05:44 +0100
Subject: [PATCH] Cut the template of the network for initial appmenus
 retrieval

The user have no way to set anything before starting the template for
the first time. Especially firewall settings, netvm etc. So to not
expose the template to the outside world, disable networking there.
---
 templates.spec | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/templates.spec b/templates.spec
index 896b19b..197793e 100644
--- a/templates.spec
+++ b/templates.spec
@@ -105,9 +105,13 @@ if [ "`stat -c %d:%i /`" != "`stat -c %d:%i /proc/1/root/.`" ]; then
     qvm-template-commit --offline-mode %{template_name}
 else
     qvm-template-commit %{template_name}
+    qvm-prefs -s %{template_name} netvm none
     qvm-start --no-guid %{template_name}
     qvm-sync-appmenus --force-root %{template_name}
     qvm-shutdown --wait %{template_name}
+    qvm-prefs -s %{template_name} netvm default
+    # restore default firewall settings, which was reset by setting netvm=none
+    rm -f %{dest_dir}/firewall.xml
     chgrp -R qubes %{dest_dir}
     chmod g+rwX -R %{dest_dir}
 fi