Re: Xen support on Squeeze
Brian May, le Sun 03 Jan 2010 16:48:06 +1100, a écrit :
> On Sun, Jan 03, 2010 at 12:47:54PM +0800, Paul Wise wrote:
> > On Sun, Jan 3, 2010 at 9:01 AM, Brian May <bam@snoopy.debian.net> wrote:
> >
> > > 1) I believe Xen, with paravirtualization (that is without QEMU) is more secure
> > > then KVM (or Xen) with QEMU.
> >
> > I haven't heard this claim before, do you have any references to support this?
>
> http://blog.orebokech.com/2007/05/xen-security-or-lack-thereof.html links to
> http://taviso.decsystem.org/virtsec.pdf.
BTW, nowadays Xen is able to start qemu in stubdomains to sandbox it.
That is however not yet packaged in Debian.
Samuel
Reply to: