Hi, > - running VMs as different host OS users Described here https://libvirt.org/drvqemu.html#securitydac Not sure what you mean by hardening here. You can set VM to get its time from the host (see here https://libvirt.org/formatdomain.html#elementsTime) and disable ntp in VM's OS. --Regards, Aleksei
From: Michael Ströder Sent: Thursday, October 20, 2016 11:48AM To: Libvirt-users Subject: security BPC HI! Disclaimer: I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm. Is there any documentation describing how to harden libvirt/qemu-kvm installations? Escpecially how to improve isolation of VMs: - secure time sync (with or without ntpd?) - random number generation - running VMs as different host OS users I do not need general OS hardening advice. Ciao, Michael. |
_______________________________________________ libvirt-users mailing list libvirt-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvirt-users