Re: protecting xen startup

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Tue, Nov 23, 2004 at 11:58:51PM -0000, Neugebauer, Rolf wrote:

> From a security point of view we probably should/need to restructure the
> current xend significantly into at least two components: a small name
> server and a daemon/tool which knows about assignment of higher level
> devices to domains etc. Note that this will also require changes to
> backend and frontends etc, ie, it's non-trivial.
 
  hi rolf, 

  i'm not familiar enough with the terminology that you are using to
  understand fully what you are saying.

 are you hinting at the allocation of device drivers across domains?

 e.g. having one domain do the hardware side and securely
 proxy-forwarding the access to that device over to another domain?

 for example /dev/console in one domain being proxy-forwarded into
 another domain for it to be accessible as /dev/xendomainconsole0,
 something like that?

 because if so that _would_ be great because it'd be a trivial job in
 selinux to set up an selinux permission to access the device inode
 at the "receiving" end so to speak.

 
 ... but i have to point out that i'm more concerned about leveraging
 what is available - right now - than i am about future versions.

 l.



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/