On Mon, 6 Jul 2009, Gene Czarcinski wrote: > Neat! > > OK, this is starting to make more sense to me. I like the idea of using the > MCS policy to protect guests from each other. These slides from LCA should help explain the design further: http://namei.org/presentations/svirt-lca-2009.pdf There's also a google video of the talk: http://video.google.com/videoplay?docid=5750618585157629496&hl=en Dan Walsh is giving a talk on the topic at Linuxcon in September: http://linuxcon.linuxfoundation.org/meetings/1571 (which will be especially useful, as the code has evolved since the initial design). -- James Morris <jmorris@xxxxxxxxx> -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list