From: "Roger Pau Monné" <roger.pau@citrix.com>
To: George Dunlap <George.Dunlap@eu.citrix.com>
Cc: tech mailinglists <mailinglists.tech@gmail.com>,
Samuel Thibault <samuel.thibault@ens-lyon.org>,
xen-users <xen-users@lists.xen.org>,
"xen-devel@lists.xen.org" <xen-devel@lists.xen.org>
Subject: Re: Questions about PVH in Xen 4.3 unstable
Date: Wed, 30 Jan 2013 11:11:00 +0000 [thread overview]
Message-ID: <5108FFC4.3030608@citrix.com> (raw)
In-Reply-To: <CAFLBxZZTxF2KBAhDZPcNfeBm=HGJwo5tXDrx0+KA8gkjsW4wNQ@mail.gmail.com>
On 30/01/13 11:04, George Dunlap wrote:
> On Wed, Jan 30, 2013 at 10:52 AM, tech mailinglists
> <mailinglists.tech@gmail.com <mailto:mailinglists.tech@gmail.com>> wrote:
>
> I thought that stubdoms for HVMs are great for security. Can it
> still be used for PV-on-HVM for security? Can only Linux run as PVH
> and Windows and so on still run as HVM?
>
>
> Stubdoms increase security by isolating the qemu process, so that it's
> not running in domain 0. PV domains (and by extension PVH domains)
> don't have a qemu process, and are therefore are secure without needing
> a stubdom.
>
> Yes, PVH is an extension of PV; so only operating systems which can be
> ported to PV will support PVH.
Isn't it probably easier to port a system with PVHVM support to PVH?
next prev parent reply other threads:[~2013-01-30 11:11 UTC|newest]
Thread overview: 20+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-01-30 10:33 Questions about PVH in Xen 4.3 unstable tech mailinglists
2013-01-30 10:47 ` Samuel Thibault
2013-01-30 10:52 ` tech mailinglists
2013-01-30 10:56 ` Samuel Thibault
2013-01-30 11:04 ` George Dunlap
2013-01-30 11:11 ` Roger Pau Monné [this message]
2013-01-30 12:20 ` Samuel Thibault
2013-01-30 12:26 ` Ian Campbell
2013-01-30 12:33 ` Samuel Thibault
2013-01-30 12:26 ` Samuel Thibault
2013-01-30 12:32 ` Samuel Thibault
2013-01-30 12:43 ` Roger Pau Monné
2013-01-30 13:35 ` tech mailinglists
2013-01-30 15:02 ` Samuel Thibault
2013-01-30 11:29 ` Jan Beulich
2013-01-30 12:04 ` tech mailinglists
2013-01-30 12:22 ` Samuel Thibault
2013-01-30 12:25 ` George Dunlap
2013-01-30 12:19 ` Samuel Thibault
2013-01-30 10:50 ` George Dunlap
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5108FFC4.3030608@citrix.com \
--to=roger.pau@citrix.com \
--cc=George.Dunlap@eu.citrix.com \
--cc=mailinglists.tech@gmail.com \
--cc=samuel.thibault@ens-lyon.org \
--cc=xen-devel@lists.xen.org \
--cc=xen-users@lists.xen.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.