Gentoo Archives: gentoo-hardened

From: Matthias-Christian Ott <ott@×××××.org>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] virtualization
Date: Tue, 06 Aug 2013 22:08:51
Message-Id: 52017402.20407@mirix.org
In Reply to: Re: [gentoo-hardened] virtualization by Alex Efros
1 On 08/06/13 13:04, Alex Efros wrote:
2 > On Tue, Aug 06, 2013 at 12:58:12PM +0800, Pavel Labushev wrote:
3 >> I wouldn't call such news good. KERNEXEC, especially on x86_64, plays a
4 >> big role in protecting the kernel from both local and remote attacks.
5 >> KVM doesn't require such arguable compromises (no pun intended).
6 >
7 > True. But KVM unable to run Mac OS X, that's main reason to use VirtualBox.
8 > Less important things: KVM don't support 3D acceleration; don't have
9 > signed drivers for guest Windows (and thus require switching Windows to
10 > "Testing mode" to install drivers); sometimes it need awful tricks like
11 > building custom BIOS from patches sources; I can't give my KVM virtual
12 > machines to friends which use Windows as host OS; etc.
13
14 I have no Windows license to test this, but as far as I found these
15 drivers should be signed:
16
17 https://alt.fedoraproject.org/pub/alt/virtio-win/latest/
18
19 - Matthias-Christian

Replies

Subject Author
Re: [gentoo-hardened] virtualization Matthew Thode <prometheanfire@g.o>