At 12:03 PM 10/24/2007 -0600, Theo de Raadt wrote:That depends on your viewpoint. There certainly may be some issues at the OS level (which have been mentioned previously), however the majority of VM applications benefit from security *isolation*, which has nothing to do with security issues of the underlying OS, and that was the viewpoint I was communicating. For example, say you have three departments within a company: Marketing, Development, Production. Allowing each department to maintain their own server instance allows each department to have their own users, home directory configuration, samba (possibly) network config & authorization, separate file/print sharing domain, etc. That is simple not doable with a single OS, yet with a reasonable priced of h/w all can be maintained on one platform. The security benefits are at the application level, *NOT* at the OS level. Perhaps more correctly: "Yes, it increased hardware utilization, and it improves security/isolation between different work domains" However few outside this community would have any comprehension of the difference. Lee
| Artem Bityutskiy | [PATCH 10/44 take 2] [UBI] debug unit implementation |
| Andrea Arcangeli | [PATCH 00 of 11] mmu notifier #v16 |
| David Brown | Re: Linux 2.6.21-rc2 |
| Ingo Molnar | [patch] softlockup watchdog: fix Xen bogosity |
git: | |
| Johannes Schindelin | Re: [PATCH 1/4] Move redo merge code in a function |
| Jeff Garzik | Re: cleaner/better zlib sources? |
| Nguyen Thai Ngoc Duy | Re: I don't want the .git directory next to my code. |
| Junio C Hamano | Re: [PATCH 2/2] git-gc: skip stashes when expiring reflogs |
| David Higgs | Re: Using the C programming language |
| Chris Bullock | OpenBSD isakmpd and pf vs Cisco PIX or ASA |
| Chris S | Re: No text cursor on OpenBSD/i386 4.1 |
| Richard Stallman | Real men don't attack straw men |
| mgrjtb | GCC 2.2.2 |
| Jojie R. T. | Re: SLS |
| Peter MacDonald | demand paging: proposal |
| C Wayne Huling | Re: Can males come from... |
| Battery Maximizer Software | 9 hours ago | Linux kernel |
| windows folder creation surprise | 10 hours ago | Windows |
| Problem in scim in Fedora 9 | 12 hours ago | Linux general |
| Firewall | 1 day ago | OpenBSD |
| IP layer send packet | 1 day ago | Linux kernel |
| dtrace for linux available | 2 days ago | Linux kernel |
| Unable to mount ramdisk image using UBoot while upgrading to 2.6.15 kernel for a MPC8540 based target | 2 days ago | Linux kernel |
| RealTek RTL8169 - can't connect | 2 days ago | NetBSD |
| vsftpd Upload Problems | 2 days ago | Linux general |
| creating con folder in desktop | 3 days ago | Windows |
