[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: chroot or virtual machine



On Tue, May 15, 2012 at 12:51:44PM +0200, Arnt Karlsen wrote:
> On Tue, 15 May 2012 11:45:58 +0200, David wrote in message 
> <[🔎] 20120515094556.GA4970@pris.crapsteak.org>:
> 
> > On Sun, May 13, 2012 at 07:13:23PM +0000, Ramon Hofer wrote:
> > > Hi all
> > > 
> > > I'm planning on setting up my new media server.
> > > 
> > > So I was thinking of putting mythbackend, logitech media server, 
> > > rtorrent, nfs, samba, etc. into virtual machines.
> > 
> > A virtual machine for every server? On what purpose?
> > Is it about security?
> 
> ..yup, the idea is deny bad code access to as much as possible,
> it can only kill whatever it can see and touch, such as vm's.

I see. SELinux can help, both in the case of using VMs (different VMs
can be executed in different MLS levels), and in the case of not using
VMs at all.

-- 
Primary key fingerprint: AD8F BDC0 5A2C FD5F A179  60E7 F79B AB04 5299 EC56

Attachment: signature.asc
Description: Digital signature


Reply to: