I have qubes R4.3.1 installed on a librem 14 laptop.
I have never used the built in camera due to security concerns and it has always been taped over.
However a new involvement with a company would require me to be available online using my inbuilt-camera and inbuilt-microphone, at prearranged times.
I have installed Mullvad VPN onto the laptop, so I can choose from a variety of vpn exit countries to go out from.
So usually I would start the vpn vm that I require, with the exit country I want to go thru. Then I would start up the vm that I can then attach to that vpn vm.
So my question is - would the camera output only be limited to the active vm connected thru the working vpn vm? or is there any way it could leak out thru any other paths?
My thinking, is that worst case, I can just close ALL vm’s except the one I need to use for the camera output, so that there should be no leaks.
[So for example I could have an Audio-Visual VM connected to a Mullvad vpn American exit node, so worst case I only have those 2 vm’s open (the AV-VM and the vpn-vm).]
Although sys-net, sys-firewall would have direct outside connections, so could they leak the camera output?
I would really appreciate any feedback. Obviously my knowledge is limited, so yes I would welcome any insights.
Thank you.