Re: [Xen-users] Xen binary distrib's kernel as domU kernel

["Ulrich Windl" <ulrich.windl@xxxxxxxxxxxxxxxxxxxx>]

On 10 Jan 2007 at 20:23, Sipos Ferenc wrote:

> Hi All,
> 
> just a quicky. Is it a security breach (by any means) if I run the
> official XenSource e.g. vmlinuz-2.6-xen kernel as my domU kernel? I

AFAIK, openSUSE (SLES10) uses the very same kernel to boot Dom0 and DomUs. It's 
conventient if you think about kernel updates and kernel security fixes. 
However 
each DomU has it's own copy of the kernel that's used to boot the DomU.

Never had an unsafe feeling with that.

Ulrich


> mean, this has the 'Privilege domain' option compiled in (as the very
> same one runs under the dom0 itself) as well as the {net,block}-backend
> drivers?
> 
> I'm using it in a potentially malicious environment (VPS hosting) and I
> want to make sure noone can tamper with system from a domU the way that
> is not desirable.
> 
> Thanks for your time in advance,
> Frank
> 
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users