Messages in this thread | | | Date | Sat, 25 Jan 2003 13:00:38 +0100 | From | Jan Hudec <> | Subject | Re: Simple patches for Linux as a guest OS in a plex86 VM (please consider) |
| |
On Sat, Jan 25, 2003 at 01:46:56AM +0000, David Wagner wrote: > Lars Marowsky-Bree wrote: > >All alternatives I have seen to UML (plex, vmware, UMLinux) suck IMHO. > > It seems plausible to expect that it might be easier to verify security > in plex86-based approaches than it is to verify security in UML.
IIRC plex86 requires quite large module on the host. And I am not sure it's does not have any privilegies. Umlinux requires no or very minimal (thus easy to check for insecurities) patch to kernel and does not need any privilegies (except the helper that sets up networking, but that's pretty minimalistic too). If you properly chroot the umlinux process, it's very secure (the skas mode will only work in chroot once it's made to use syscall).
------------------------------------------------------------------------------- Jan 'Bulb' Hudec <bulb@ucw.cz> - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |