Re: Secure KVM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2011-11-07 at 08:37 +0200, Pekka Enberg wrote:
> On Mon, Nov 7, 2011 at 8:29 AM, Sasha Levin <levinsasha928@xxxxxxxxx> wrote:
> > As you said, clone() isn't really an option - sharing things like the VM
> > and handles is something which I want to avoid. How does your patch
> > handle IPC?
> 
> Use the unshare() system call?

Yup, but you must somehow communicate with the master process, and this
is currently missing from the lguest implementation since everything is
shared (vm + fds).

If you simply unshare it, you must have a different method of talking
with the master process. I suggested doing it using unix sockets, and am
wondering how Rusty did it in his patch.

-- 

Sasha.

--
To unsubscribe from this list: send the line "unsubscribe kvm" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [KVM ARM]     [KVM ia64]     [KVM ppc]     [Virtualization Tools]     [Spice Development]     [Libvirt]     [Libvirt Users]     [Linux USB Devel]     [Linux Audio Users]     [Yosemite Questions]     [Linux Kernel]     [Linux SCSI]     [XFree86]
  Powered by Linux