Re: [Xen-users] Using Xen as a jail for malicious code

To:	Mark Williamson <mark.williamson@xxxxxxxxxxxx>
Subject:	Re: [Xen-users] Using Xen as a jail for malicious code
From:	Florian Weimer <fw@xxxxxxxxxxxxx>
Date:	Tue, 06 Dec 2005 11:16:46 +0100
Cc:	Rob Renaud <rrenaud@xxxxxxxxx>, xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date:	Tue, 06 Dec 2005 10:17:16 +0000
Envelope-to:	www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to:	<200510252049.40641.mark.williamson@xxxxxxxxxxxx> (Mark Williamson's message of "Tue, 25 Oct 2005 20:49:40 +0100")
List-help:	<mailto:xen-users-request@lists.xensource.com?subject=help>
List-id:	Xen user discussion <xen-users.lists.xensource.com>
List-post:	<mailto:xen-users@lists.xensource.com>
List-subscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe:	<http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
References:	<a5d9c4580510221804h1a6d0ad8wb395f66d49a09f49@xxxxxxxxxxxxxx> <200510231237.02074.mark.williamson@xxxxxxxxxxxx> <87fyqpwfb3.fsf@xxxxxxxxxxxxxxxxx> <200510252049.40641.mark.williamson@xxxxxxxxxxxx>
Sender:	xen-users-bounces@xxxxxxxxxxxxxxxxxxx

* Mark Williamson:

> Conversely, domains which do have real device access must always be
> considered privileged, due to limitations of current hardware.
> Usually that's just dom0, though, unless you've got a really
> advanced setup.

Does this mean that unprivileged domains are exposed mainly through
their networking stacks?

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

<Prev in Thread]	Current Thread	[Next in Thread>
Re: [Xen-users] Using Xen as a jail for malicious code, Florian Weimer <=

WARNING - OLD ARCHIVES

xen-users

Re: [Xen-users] Using Xen as a jail for malicious code