Hi Michael,

On Wed, 12 Aug 2009 14:26:48 +0200, Michael Thayer wrote
> Hello Rivalino,
> 
> Rivalino Matias Jr wrote:
> > That is the problem. I installed VBox as WindowsXP admin user and made it 
> > available for everybody (ordinary windows xp users) in the machine. I need 
to 
> > be able to prevent them from doing networking in their VMs
> > 
> > The main issue is that they (ordinary users) can enable everything I can 
> > disable (as admin) in terms of networking in the VBox GUI. I do not know 
how 
> > to disable the network functionality of VBox for their eyes.

> I'm not quite sure what you are trying to achieve here.  It seems to 
> me that you want to prevent users who already have access to the 
> host network from starting a guest and accessing it from inside of 
> that.  

==> Yes.

> But surely any damage a user can do by running network 
> services inside of a guest they can also do by running them directly 
> on the host.

Not necessarily. In my deployment, users from host system are not 
administrators - they are ordinary non-privileged users.  For example, they 
cannot install and run a server software (ex. dhcpd). But, in the guest os 
they will be root. Hence, they can install everything. They can do whatever 
they want (ex. generate malicious traffic, install and run server like dns, 
dhcpd, ... among others). 

Regards.


-- 
Esta mensagem foi verificada pelo sistema de antivĂ­rus e
 acredita-se estar livre de perigo.


_______________________________________________
vbox-users mailing list
vbox-users@virtualbox.org
http://vbox.innotek.de/mailman/listinfo/vbox-users

Reply via email to