From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jacob Gorm Hansen Subject: Re: Building domains as a lesser user (was Re: boot loaders for domain != 0) Date: Thu, 03 Feb 2005 20:02:09 -0800 Message-ID: <4202F3C1.7020301@diku.dk> References: <4202EC36.8000103@codemonkey.ws> <4202EE37.4080707@diku.dk> <4202F1EE.4000908@codemonkey.ws> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit In-Reply-To: <4202F1EE.4000908@codemonkey.ws> Sender: xen-devel-admin@lists.sourceforge.net Errors-To: xen-devel-admin@lists.sourceforge.net List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , List-Archive: To: Anthony Liguori Cc: xen-devel@lists.sourceforge.net List-Id: xen-devel@lists.xenproject.org Anthony Liguori wrote: > Well, it's not the same as trusting a Domain's filesystem to be proper. > But it still requires trusting that there are no exploitable bugs in the > software. Except that the attacker never gets his hand on any of this data. It is like telling you to exploit my mother's win95 box without the network or the keyboard being plugged in. > Using a lesser-user to create the domain within Domain-0 requires > trusting there are no exploitable bugs in the kernel syscall interfaces. > > So, it's a point of failure as much as Linux is. Well, I do not agree with you there. >> Anyway, this code is already written for Xen 1.3. You can find it at >> http://www.diku.dk/~jacobg/self-migration/ > Awesome! This is pretty cool stuff. Do you have plans to update for Xen 2.0/Linux 2.6? Kernel-driven migration seems like an appealing topic. I would like to, now that it seems xend is going to be slimmed down. However, my time to work on this is a bit limited for the next six months :-( thanks, Jacob ------------------------------------------------------- This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting Tool for open source databases. Create drag-&-drop reports. Save time by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc. Download a FREE copy at http://www.intelliview.com/go/osdn_nl