On Thu, Oct 20, 2016 at 10:48:55AM +0200, Michael Ströder wrote:
HI! Disclaimer: I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm. Is there any documentation describing how to harden libvirt/qemu-kvm installations? Escpecially how to improve isolation of VMs: - secure time sync (with or without ntpd?) - random number generation
See device RNG [1]
- running VMs as different host OS users
See <seclabel/> [2] oh, I see we don't have much there. Well then, this would do: <seclabel model="dac" type="static"> <label>user:group</label> </seclabel> Martin [1] https://libvirt.org/formatdomain.html#elementsRng [2] https://libvirt.org/formatdomain.html#seclabel
I do not need general OS hardening advice. Ciao, Michael.
_______________________________________________ libvirt-users mailing list libvirt-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvirt-users
Attachment:
signature.asc
Description: Digital signature
_______________________________________________ libvirt-users mailing list libvirt-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvirt-users
