Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
KVM with Virtio- Containment broken?
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
dman777
l33t
l33t


Joined: 10 Jan 2007
Posts: 998

PostPosted: Sun Oct 02, 2011 1:30 am    Post subject: KVM with Virtio- Containment broken? Reply with quote

I have a question about Virtio and KVM. With KVM, everything is contained for security within the VM. With Virtio and paravirtulization, the guest drivers share thier work load the host for better performance. Does this decrease the containment of the Virtual Guest?
Back to top
View user's profile Send private message
cach0rr0
Bodhisattva
Bodhisattva


Joined: 13 Nov 2008
Posts: 4123
Location: Houston, Republic of Texas

PostPosted: Sun Oct 02, 2011 7:48 am    Post subject: Reply with quote

not to the degree that you should be concerned, no.
You're, presumably, exposing your hosts to the outside world, such that they are contactable by the outside world.

The sheer fact that you have network connectivity between guests and/or between guests and host, should be a far, far lesser concern than allowing connectivity between guest and outside world.

Unless there comes some vuln that's directly exploitable purely within the network stack, this minimal loss of "containment" is a non-issue
_________________
Lost configuring your system?
dump lspci -n here | see Pappy's guide | Link Stash
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum