Re: virtualization
Alex Efros <[email protected]>
| Newsgroups | gmane.linux.gentoo.hardened |
|---|---|
| Organization | http://powerman.name/ |
| Message-ID | <[email protected]> |
Hi! On Tue, Aug 06, 2013 at 12:58:12PM +0800, Pavel Labushev wrote: > I wouldn't call such news good. KERNEXEC, especially on x86_64, plays a > big role in protecting the kernel from both local and remote attacks. > KVM doesn't require such arguable compromises (no pun intended). True. But KVM unable to run Mac OS X, that's main reason to use VirtualBox. Less important things: KVM don't support 3D acceleration; don't have signed drivers for guest Windows (and thus require switching Windows to "Testing mode" to install drivers); sometimes it need awful tricks like building custom BIOS from patches sources; I can't give my KVM virtual machines to friends which use Windows as host OS; etc. KVM works and this is very good, but for now it's still far away from real products like VMware or VirtualBox. -- WBR, Alex.