Re: virtualization
Pavel Labushev <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 6 Aug 2013 02:14:25 +0300 Alex Efros <[email protected]> wrote: > Good news! > VirtualBox now works with hardened kernel if these options are disabled: > [ ] Enforce non-executable kernel pages > [ ] Randomize kernel stack base I wouldn't call such news good. KERNEXEC, especially on x86_64, plays a big role in protecting the kernel from both local and remote attacks. KVM doesn't require such arguable compromises (no pun intended).
signature.asc
(application/pgp-signature, 836 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.20 (GNU/Linux) iQIcBAEBAgAGBQJSAIJpAAoJEGrJjhq7qg7wx9AQAL6fpTpsuYVl89XZajcqDnvn Pk+9DIWluY2RTH7Je2hAHS0pHGO0IjkjU7jktZqO28SsNTuUIfCX5h82bO24ikzM 1CSOBAiy7q2pVTRM3IPjgLxKEgXK5+ETCaEeSr1gc/HJ5067WhiMlwJdS5A+auk5 vmVHxuG6I99dtf9VTS18vjLJWSq8HfHGvG2vyrItE6klPWxhlFnmQltEz3vqilCa OYb+hltg33uchbMDY6n4IH4Ckb3/Y++02LCg4GhgJpyDLn7DzjBHRx3PdrOJuB1r vazuqDEoYAFAf5J3ax7LOKD4S8Idh17EW4eO65Mdjsbwayp2BZHdd/5VByVShlq6 63ykKc9ohTRHKgdvpFYsAlzqc8KoJcSVj/Gk9lcPmH9r29b5xnWcdsXlTFFG5JB3 09fLwVVW/ioVny8cgugmBiHTD2+3rNw3vyziJ1eVNE+JFCXDd2+HyXawyi5spPPs KHwG7F0txwL78VWrkMB26KQyBO51U6oMC9N6ljFVo7Hp/pJK1McuqlzdHg3YWqfa htkkzN/yBCXxJlqN45WuCQ5OBB25ekVZbbkZpJhdRuJVlPzRZtjGnRxcuUu9Ilrl 1o5n+Pxgcy+cVAodk++27E5p7cvI3/9W9ij07dn8GQEpvGYZHZqd/T3dJkF3uUyD 4dHUNx4PB+YRPiwNQTmk =4vZq -----END PGP SIGNATURE-----