From: Jacob Gorm Hansen <jacobg@diku.dk>
To: Anthony Liguori <anthony@codemonkey.ws>
Cc: xen-devel@lists.sourceforge.net
Subject: Re: Building domains as a lesser user (was Re: boot loaders for domain != 0)
Date: Thu, 03 Feb 2005 19:16:37 -0800 [thread overview]
Message-ID: <4202E915.4030100@diku.dk> (raw)
In-Reply-To: <4202DB0F.1050102@codemonkey.ws>
Anthony Liguori wrote:
> As an alternative, I was trying to see if there was a way do create a
> domain as a non-root user. Since root can set up the shared memory
> segments, it seems like the builder should be able to drop to a lesser
> user. It could even enter a chroot() so that the only potential attack
> vector is a syscall exploit (which are rare and well-known enough that
> that seems to be acceptable).
>
If we trust Linux to enforce security, we do not need Xen at all ;-)
Jacob
-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
next prev parent reply other threads:[~2005-02-04 3:16 UTC|newest]
Thread overview: 18+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-02-03 22:11 boot loaders for domain != 0 Ian Pratt
2005-02-04 1:09 ` Jacob Gorm Hansen
2005-02-04 2:16 ` Building domains as a lesser user (was Re: boot loaders for domain != 0) Anthony Liguori
2005-02-04 3:12 ` Jacob Gorm Hansen
2005-02-04 3:16 ` Jacob Gorm Hansen [this message]
2005-02-04 3:34 ` Anthony Liguori
2005-02-04 3:56 ` Jacob Gorm Hansen
-- strict thread matches above, loose matches on Subject: below --
2005-02-04 2:30 Ian Pratt
2005-02-04 3:09 ` Jeremy Katz
2005-02-04 5:13 ` Ronald G. Minnich
2005-02-04 3:29 ` Anthony Liguori
2005-02-04 3:38 ` Jacob Gorm Hansen
2005-02-04 3:54 ` Anthony Liguori
2005-02-04 4:02 ` Jacob Gorm Hansen
2005-02-04 19:49 ` Adam Sulmicki
2005-02-04 9:44 Ian Pratt
2005-02-04 12:33 Ian Pratt
2005-02-04 20:48 ` Anthony Liguori
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4202E915.4030100@diku.dk \
--to=jacobg@diku.dk \
--cc=anthony@codemonkey.ws \
--cc=xen-devel@lists.sourceforge.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.