From: | Marco Venutti <veeenrg@×××××.com> | ||
---|---|---|---|
To: | gentoo-hardened@l.g.o | ||
Subject: | Re: [gentoo-hardened] "How hard" is Linux kernel-side hardening? | ||
Date: | Mon, 21 Sep 2009 15:16:01 | ||
Message-Id: | 478d5e250909210815u24ce9175rac1c750cf0f5a2a1@mail.gmail.com | ||
In Reply to: | Re: [gentoo-hardened] "How hard" is Linux kernel-side hardening? by Natanael Copa |
1 | --[cut]-- |
2 | My biggest worries when it comes to PaX (for the moment) is that you |
3 | cannot run paravirtualization with PaX. |
4 | --[cut]-- |
5 | |
6 | |
7 | I believe, now I'm writing, |
8 | you can run paravirtualization |
9 | pretty well, if you choose KVM, |
10 | with no PaX issue. |
11 | |
12 | I think soon, other virtualization approches, |
13 | will be available under PaX protection. |