A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
only to the list. Regards, joanna. -- Joanna Rutkowska Founder/CEO Invisible Things Lab http://invisiblethingslab.com/ signature.asc Description: OpenPGP digital signature

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Avi Kivity wrote: 1) Do you have any support for para-virtualized VMs? Yes, for example, we support paravirtualized timers and mmu for Linux. These are fairly minimal compared to Xen's pv domains. Can I run a regular Linux as PV-guest? Specifically, can I get rid of qemu totally,

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Avi Kivity wrote: On 12/07/2009 03:05 PM, Joanna Rutkowska wrote: In particular, is it possible to move the qemu from the host to one of the VMs? Perhaps to have a separate copy of qemu for each VM? (ala Xen's stub-domains) It should be fairly easy to place qemu in a guest. You would

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Avi Kivity wrote: On 12/07/2009 03:30 PM, Joanna Rutkowska wrote: Avi Kivity wrote: 1) Do you have any support for para-virtualized VMs? Yes, for example, we support paravirtualized timers and mmu for Linux. These are fairly minimal compared to Xen's pv domains. Can I

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Anthony Liguori wrote: Avi Kivity wrote: No. Paravirtualization just augments the standard hardware interface, it doesn't replace it as in Xen. NB, unlike Xen, we can (and do) run qemu as non-root. Things like RHEV-H and oVirt constrain the qemu process with SELinux. On Xen you can get

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Avi Kivity wrote: On 12/07/2009 07:09 PM, Joanna Rutkowska wrote: Also, you can use qemu to provide the backends to a Xen PV guest (see -M xenpv). The effect is that you are moving that privileged code from the kernel (netback/blkback) to userspace (qemu -M xenpv). In general, KVM tends

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Avi Kivity wrote: On 12/07/2009 07:15 PM, Joanna Rutkowska wrote: But the difference is that in case of Xen one can *easily* move the backends to small unprivileged VMs. In that case it doesn't matter the code is in kernel mode, it's still only in an unprivileged domain. They're

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Anthony Liguori wrote: Joanna Rutkowska wrote: Avi Kivity wrote: On 12/07/2009 07:09 PM, Joanna Rutkowska wrote: Also, you can use qemu to provide the backends to a Xen PV guest (see -M xenpv). The effect is that you are moving that privileged code from the kernel (netback/blkback

Re: A few KVM security questions

2009-12-07 Thread Joanna Rutkowska
Anthony Liguori wrote: Joanna Rutkowska wrote: Anthony Liguori wrote: Avi Kivity wrote: No. Paravirtualization just augments the standard hardware interface, it doesn't replace it as in Xen. NB, unlike Xen, we can (and do) run qemu as non-root. Things like RHEV-H and oVirt