xen-users

[Top] [All Lists]

RE: [Xen-users] Custom kernel

from [Steffen Heil]

[Permanent Link][Original]

To:	"'Stephen Yum'" <steveyum@xxxxxxxxxxxxxx>, <xen-users@xxxxxxxxxxxxxxxxxxx>
Subject:	RE: [Xen-users] Custom kernel
From:	"Steffen Heil" <lists@xxxxxxxxxxxxxxx>
Date:	Sat, 2 Sep 2006 15:31:00 +0200
Delivery-date:	Sat, 02 Sep 2006 06:31:18 -0700
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
In-reply-to:	<21631589-0B03-4006-96F2-A647AF76C319@xxxxxxxxxxxxxx>
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index:	AcbOWWpzQBXe16cFTe6sSDb1XIoLBgAOhI4w

Hi

> Me, I don't want to use a privileged kernel for my guests. 
> That's ludicrous. The potential security problems far 
> outweighs the convenience that method may provide.

Can someone with inside knowledgte to xen comment on this?

I don't believe there is a security problem. But I don't know the sources.
I think dom0 means, that there are things compiled in, which may be used for
management, but using these functions requires access to the hypervisor,
which I expect to be only granded to that domain that boots the system
(hence dom0).
So running a dom0-compiled kernel as domU will give a litte unnessesary
load, but NO security problem.

If the content of a kernel might change the privileges a domain has would
mean that any kernel (and as such kernel-mode module) running in a domU
might take control of the system. I don't beliebe that...

Regards,
  Steffen

smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
Re: [Xen-users] Custom kernel, Stephen Yum RE: [Xen-users] Custom kernel, Steffen Heil <= Re: [Xen-users] Custom kernel, jonr RE: [Xen-users] Custom kernel, Steffen Heil RE: [Xen-users] Custom kernel, Steffen Heil

Previous by Date:	RE: [Xen-users] Kernel drivers on domU, Steffen Heil
Next by Date:	[Xen-users] cdrom cannot be found in xen0, Eric Benton
Previous by Thread:	Re: [Xen-users] Custom kernel, Stephen Yum
Next by Thread:	Re: [Xen-users] Custom kernel, jonr
Indexes:	[Date] [Thread] [Top] [All Lists]