On 11/10/2011 11:49 AM, Sasha Levin wrote: > > > > It does, but the hypervisor can only access the guest's images, and a > > few internal files (like the qemu-kvm executable and its libraries). > > What about devices? You let the guest read and write to devices as > well (/dev/kvm for example, or network devices). They're all protected. /dev/kvm is obviously rw for anyone, but it can't be used to transfer information. -- error compiling committee.c: too many arguments to function -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html