Re: security BPC

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

> - running VMs as different host OS users

Described here https://libvirt.org/drvqemu.html#securitydac

> - secure time sync (with or without ntpd?)

Not sure what you mean by hardening here. You can set VM to get its time from the host (see here https://libvirt.org/formatdomain.html#elementsTime) and disable ntp in VM's OS.

--Regards, Aleksei



From: Michael Ströder
Sent: Thursday, October 20, 2016 11:48AM
To: Libvirt-users
Subject: security BPC
HI!

Disclaimer:
I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm.

Is there any documentation describing how to harden libvirt/qemu-kvm installations?

Escpecially how to improve isolation of VMs:
- secure time sync (with or without ntpd?)
- random number generation
- running VMs as different host OS users

I do not need general OS hardening advice.

Ciao, Michael.




_______________________________________________
libvirt-users mailing list
libvirt-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvirt-users

_______________________________________________
libvirt-users mailing list
libvirt-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvirt-users

[Index of Archives]     [Virt Tools]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux