xen-users

[Top] [All Lists]

[Xen-users] CentOS5.1, Each xen image contain its own kernel, any securi

from [Azrul Rahim]

[Permanent Link][Original]

To:	xen-users@xxxxxxxxxxxxxxxxxxx
Subject:	[Xen-users] CentOS5.1, Each xen image contain its own kernel, any security issue?
From:	"Azrul Rahim" <write2me@xxxxxxxxx>
Date:	Mon, 14 Apr 2008 15:15:27 +0800
Delivery-date:	Mon, 14 Apr 2008 00:16:02 -0700
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxx
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

The default CenOS 5.1 setup will basically install the domU kernel inside its own image. This mean that domU can actually recompile and assign different kernel for it to boot up.

1. If there any security issue to allow user to select their own Kernel ?

2. Is is possible at all, by loading different kernel or modules, the domU user might be able to compromise dom0 ?

Thanks!

--
Azrul Rahim

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

[More with this subject...]

<Prev in Thread]	Current Thread	[Next in Thread>
[Xen-users] CentOS5.1, Each xen image contain its own kernel, any security issue?, Azrul Rahim <=

Previous by Date:	[Xen-users] How to raise more than one serial port in guest domain, Lucky
Next by Date:	[Xen-users] SOLVED: network script bug, Maarten Vanraes
Previous by Thread:	[Xen-users] How to raise more than one serial port in guest domain, Lucky
Next by Thread:	[Xen-users] SOLVED: network script bug, Maarten Vanraes
Indexes:	[Date] [Thread] [Top] [All Lists]