From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33)
	id 1CWiE5-0002UP-JC
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 16:29:29 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33)
	id 1CWiE4-0002Td-5l
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 16:29:28 -0500
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.33) id 1CWiE4-0002TT-2f
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 16:29:28 -0500
Received: from [213.165.64.20] (helo=mail.gmx.net)
	by monty-python.gnu.org with smtp (Exim 4.34) id 1CWi4r-0003dG-B2
	for qemu-devel@nongnu.org; Tue, 23 Nov 2004 16:19:57 -0500
Message-ID: <41A3A983.9030100@gmx.com>
Date: Tue, 23 Nov 2004 22:20:03 +0100
From: "Bochnig, Martin" <mb1x@gmx.com>
MIME-Version: 1.0
Subject: Re: [Qemu-devel] building a virus-proof PC with Qemu
References: <da63183704112304315e4f657@mail.gmail.com>	
	<41A33090.9080703@gmx.com> <1101221775.8460.44.camel@localhost>
	<da63183704112309374be23309@mail.gmail.com>
In-Reply-To: <da63183704112309374be23309@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Reply-To: bochnig@pool.math.tu-berlin.de, qemu-devel@nongnu.org
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: Piotras <piotras@gmail.com>
Cc: qemu-devel@nongnu.org

Piotras wrote:

>
>How to mark data as "trusted"? There are many possibilities. 
>For example when inserting CD-ROM we could have a checkbox
>(handled by host) to mark all data read from CD-ROM as 
>"trusted". Another possibility is to have a special utility running 
>inside the guest that could tell Qemu that a given file (set of 
>bytes on disk) contains classified data.
>  
>

Hi,

sorry, but why don't you use/recommend Trusted Solaris (SPARC and i386)
http://wwws.sun.com/software/solaris/trustedsolaris/   ?
I hardly doubt that it will be too easy for anyone to clone the security 
mechanisms it provides.


Regards,
Martin