Re: Xen support on Squeeze
On Sun, Jan 03, 2010 at 12:47:54PM +0800, Paul Wise wrote:
> On Sun, Jan 3, 2010 at 9:01 AM, Brian May <bam@snoopy.debian.net> wrote:
>
> > 1) I believe Xen, with paravirtualization (that is without QEMU) is more secure
> > then KVM (or Xen) with QEMU.
>
> I haven't heard this claim before, do you have any references to support this?
http://blog.orebokech.com/2007/05/xen-security-or-lack-thereof.html links to
http://taviso.decsystem.org/virtsec.pdf.
I don't know for certain this applies to KVM, however I would assume so.
In doing a search for the above I come across a number of security issues in
Xen that are blamed on QEMU.
Also see:
http://etbe.coker.com.au/2007/10/28/xen-and-security/
--
Brian May <bam@snoopy.debian.net>
Reply to: