The four gates
Exactly what cutting the network, home share, graphics or input does — and doesn't do.
On this page 6 sections
Each gate is honest about its scope, because "cut the internet" and "unplug this VM's network card" are not the same promise.
Network#
- Linux can't reach the internet, your local network, or your Mac over the network.
- SSH stops working, because SSH uses the network. The SSH card says the address isn't answering and names this gate as a likely reason.
mslshells, the Terminal tab and MSL Files keep working. They use a direct channel between your Mac and the virtual machine (vsock) that doesn't go through the network card at all.
Mac home share#
Linux loses access to your Mac home folder. Close anything using files in /mnt/mac before cutting it.
Graphics (mslgd)#
New Linux app windows can't open. Apps already on screen carry on — cut this before launching things if you want none of them.
Keyboard & mouse#
Linux app windows still draw, but typing and clicking in them do nothing. Handy for watching something run without nudging it by accident.
Combining them#
| You want | Cut |
|---|---|
| No internet, but keep working in the shell | Network |
| Keep a program away from your personal files | Mac home share |
| Stop an instance from putting windows on your screen | Graphics |
| Look but don't touch | Keyboard & mouse |
| Everything, for something you don't trust | Seal it |
This one matters for a protected image#
The Mac home share is how instance disks are reachable from inside a guest: they live in your home folder, and the share is writable. If you are keeping an image from being copied, cutting this gate is the first step — see Protecting an image.