Re: [Xen-devel] Diff between std, xen0 and xenU kernel

[Jean-Eric Cuendet <jec@xxxxxxxx>]

> > > And if I run programs in the xen0 instance, will it degrade perf of
> > > xenU instances? Or render them less secure (in term of isolation)?
>
> It won't matter to performance any more than running applications in the 
> unprivileged instances would.
> Regarding security you need to keep in mind that an attacker who gains root 
> privileges in domain 0 will be able to get root privileges in every domain on 
> the machine.  Thus if you're running an internet-facing machine you should 
> make sure that domain 0 exposes as few services to the internet as possible.
That means that I should make the domain-0 as small as possible abd run 
only, say, ssh to administer it, but nothing else. And create other 
domains (which are secure and unpriviledged) for real services.
Thanks for all informations.
-jec



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel