Hi,
> - running VMs as different host OS users
Described here https://libvirt.org/drvqemu.html#securitydac
> - secure time sync (with or without ntpd?)
Not sure what you mean by hardening here. You can set VM to get its time
from the host (see here
https://libvirt.org/formatdomain.html#elementsTime) and disable ntp in
VM's OS.
/--Regards, Aleksei/
------------------------------------------------------------------------
*From:* Michael Ströder
*Sent:* Thursday, October 20, 2016 11:48AM
*To:* Libvirt-users
*Subject:* [libvirt-users] security BPC
HI!
Disclaimer:
I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm.
Is there any documentation describing how to harden libvirt/qemu-kvm
installations?
Escpecially how to improve isolation of VMs:
- secure time sync (with or without ntpd?)
- random number generation
- running VMs as different host OS users
I do not need general OS hardening advice.
Ciao, Michael.
_______________________________________________
libvirt-users mailing list
libvirt-users@redhat.com
https://www.redhat.com/mailman/listinfo/libvirt-users
_______________________________________________
libvirt-users mailing list
libvirt-users@redhat.com
https://www.redhat.com/mailman/listinfo/libvirt-users
