Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Secure inside VirtualBox
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
farmer.ro
Apprentice
Apprentice


Joined: 20 Aug 2016
Posts: 179

PostPosted: Thu Sep 22, 2016 6:07 am    Post subject: Secure inside VirtualBox Reply with quote

I use VirtualBox on Gentoo ~amd64 system, and use it to boot a Gentoo Live DVD to browse dodgy websites, with the thought that if the Gentoo Live DVD gets compromised or owned by a possible exploit, its just as easy as closing and deleting the VirtualBox session.

compared to my host system, the Gentoo Live DVD seems to run older software, which would possibly make it more vulnerable;

i would like to know if that is true. and if true, what to do to make the VirtualBox session more secure...
Back to top
View user's profile Send private message
qubix
Tux's lil' helper
Tux's lil' helper


Joined: 22 Sep 2003
Posts: 144
Location: Warsaw/Poland

PostPosted: Thu Sep 22, 2016 9:38 am    Post subject: Reply with quote

what you can do is create another gentoo installation and sync it over to the virtualbox image everytime you want to use it. If anything gets installed on this system it will get deleted when the syncing is done.

On the other hand, I do not use any protection like that. When I see something fishy on a website, I just pull out very quickly :)
_________________
qubix
Back to top
View user's profile Send private message
NeddySeagoon
Administrator
Administrator


Joined: 05 Jul 2003
Posts: 42583
Location: 56N 3W

PostPosted: Thu Sep 22, 2016 10:21 am    Post subject: Reply with quote

farmer.ro,

The Gentoo Live DVD is read only, providing you don't have its persistent mode on.
Therefore the Live DVD itself cannot get compromised. Thus any compromise lasts only as long as your session between boots.
That can be a very long time if you save the state of the VM rather than rebooting every time.

Maybe you want to boot Tin Hat Linux on the bare metal?
It runs entirely in RAM and has no way to access permanent storage. Its Gentoo based too.

You can't really protect yourself from dodgy websites so your original system design premise is flawed.
The biggest risk today is "social engineering". Gentoo can't protect you from that.
_________________
Regards,

NeddySeagoon

Computer users fall into two groups:-
those that do backups
those that have never had a hard drive fail.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum