Re: [RFC][PATCH 00/01]qemu VM entrypoints

Anthony Liguori
2007-07-20T20:46:18Z

James Morris wrote:
> On Fri, 20 Jul 2007, Daniel P. Berrange wrote:
>
>
>> It could be - if your put the policy at the control API layer instead of
>> in QEMU itself.
>>
>
> Then you can bypass MAC security by invoking qemu directly.
>

You can bypass MAC security by writing your own binary that uses the KVM
kernel interfaces.

Regards,

Anthony Liguori

> - James