WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: Building domains as a lesser user (was Re: [Xen-devel] boot loaders

To: Jacob Gorm Hansen <jacobg@xxxxxxx>
Subject: Re: Building domains as a lesser user (was Re: [Xen-devel] boot loaders for domain != 0)
From: Anthony Liguori <anthony@xxxxxxxxxxxxx>
Date: Thu, 03 Feb 2005 21:34:43 -0600
Cc: xen-devel@xxxxxxxxxxxxxxxxxxxxx
Delivery-date: Fri, 04 Feb 2005 03:35:48 +0000
Envelope-to: xen+James.Bulpin@xxxxxxxxxxxx
In-reply-to: <4202E915.4030100@xxxxxxx>
List-archive: <http://sourceforge.net/mailarchive/forum.php?forum=xen-devel>
List-help: <mailto:xen-devel-request@lists.sourceforge.net?subject=help>
List-id: List for Xen developers <xen-devel.lists.sourceforge.net>
List-post: <mailto:xen-devel@lists.sourceforge.net>
List-subscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=subscribe>
List-unsubscribe: <https://lists.sourceforge.net/lists/listinfo/xen-devel>, <mailto:xen-devel-request@lists.sourceforge.net?subject=unsubscribe>
References: <A95E2296287EAD4EB592B5DEEFCE0E9D1236E4@xxxxxxxxxxxxxxxxxxxxxxxxxxx> <4202CB48.2040704@xxxxxxx> <4202DB0F.1050102@xxxxxxxxxxxxx> <4202E915.4030100@xxxxxxx>
Sender: xen-devel-admin@xxxxxxxxxxxxxxxxxxxxx
User-agent: Mozilla Thunderbird 1.0 (X11/20041206)
Jacob Gorm Hansen wrote:

Anthony Liguori wrote:

If we trust Linux to enforce security, we do not need Xen at all ;-)

The current architecture of Xen requires that we trust whatever is running in Domain-0. The problems being cited wouldn't be a problem if you could create domains from unpriviledged Domains because you could have creator Domains who could be created from a trusted source and used as a buffer against attack.

No matter what, you're trusting some non-Xen piece of software to enforce security within Domain-0, unless the next step in Xen is to write a Domain-0 OS :-)

Regards,

--
Anthony Liguori
anthony@xxxxxxxxxxxxx



-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel