| |
|
 |
|
 |
|
|
|
| |
|
|
xen-devel
Re: Building domains as a lesser user (was Re: [Xen-devel] boot loaders
Jacob Gorm Hansen wrote:
I would disagree that the trusted loader is a point of failure. It is
not trusted in the sense that we need to trust its code to behave
correctly, all we need is to trust it as not being malformed data that
can trigger an exploit in the domain builder, and of course it is not,
given that it is supplied by you the admin and not by a (potentially
hostile) user.
Well, it's not the same as trusting a Domain's filesystem to be proper.
But it still requires trusting that there are no exploitable bugs in the
software.
Using a lesser-user to create the domain within Domain-0 requires
trusting there are no exploitable bugs in the kernel syscall interfaces.
So, it's a point of failure as much as Linux is.
Anyway, this code is already written for Xen 1.3. You can find it at
http://www.diku.dk/~jacobg/self-migration/
Awesome! This is pretty cool stuff. Do you have plans to update for
Xen 2.0/Linux 2.6? Kernel-driven migration seems like an appealing topic.
Regards,
Jacob
--
Anthony Liguori
anthony@xxxxxxxxxxxxx
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel
|
|
|
| |
|
Home