RE: [Xen-users] If Dom0 was compramised

["Jonathan Tripathy" <jonnyt@xxxxxxxxxxx>]

What if I were to use this setup:

http://www.shorewall.net/XenMyWay.html

 

 

In a nutshell, run a firewall ina DomU and delegate a physicaal NIC to it (The physical NIC would have a public IP from the ISP).

Then, connect the other vifs from the firewall DomU to a bridge, which eventually connects to the LAN

 

Is this secure? I could disable ssh etc. in Dom0 and just use an old school monitor connected to the server. Is this as safe as it could be?

 

Thanks

 

---

From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx on behalf of Olivier B.
Sent: Thu 20/05/2010 11:06
To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] If Dom0 was compramised

I'm not an expert, but Dom0 have access at least to the disk, the network trafic, and memory thought "xm save".
Well, it seem to be a full access no ?

Olivier

Le 20/05/2010 11:53, Jonathan Tripathy a écrit :

Hi Everyone,

 

If Dom0 were to get compramised, how bad would this be? How much access to the DomUs does Dom0 have?

 

Trying to build a strong security network here

 

Many Thanks

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users