Re: [Xen-devel] Module loading in unpriveledged domains

[David Hopwood <david.nospam.hopwood@xxxxxxxxxxxxxxxx>]

Ian Pratt wrote:
> > Is there any security risk in enabling loadable module support in the linux
> > kernel used for the unpriveledged domains? I ask this question in the context of
> > a virtual private server hosting provider.
> There shouldn't be any security risk at all -- Xen should provide
> all the isolation you need (modulo any bugs).
So the answer to the original question is, "yes, enabling loadable module
support will increase your exposure to security risks due to any weaknesses
in Xen's isolation." Xen hasn't had particularly extensive security review
yet.

--
David Hopwood <david.nospam.hopwood@xxxxxxxxxxxxxxxx>



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. 
http://productguide.itmanagersjournal.com/
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel