Re: [Xen-devel] Questions about PVH in Xen 4.3 unstable

[Roger Pau Monné <roger.pau@xxxxxxxxxx>]

On 30/01/13 11:04, George Dunlap wrote:
> On Wed, Jan 30, 2013 at 10:52 AM, tech mailinglists
> <mailinglists.tech@xxxxxxxxx <mailto:mailinglists.tech@xxxxxxxxx>> wrote:
> 
>     I thought that stubdoms for HVMs are great for security. Can it
>     still be used for PV-on-HVM for security? Can only Linux run as PVH
>     and Windows and so on still run as HVM?
> 
> 
> Stubdoms increase security by isolating the qemu process, so that it's
> not running in domain 0.  PV domains (and by extension PVH domains)
> don't have a qemu process, and are therefore are secure without needing
> a stubdom.
> 
> Yes, PVH is an extension of PV; so only operating systems which can be
> ported to PV will support PVH.

Isn't it probably easier to port a system with PVHVM support to PVH?


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel