Recent Features
| |||||||||||||
Qubes beta 1 releasedQubes beta 1 releasedPosted Apr 13, 2011 20:07 UTC (Wed) by SEJeff (subscriber, #51588)In reply to: Qubes beta 1 released by Felix_the_Mac Parent article: Qubes beta 1 released
It honestly surprises me that no one has done something very similar with lxc (linux containers). There was an article recently about starting X from a container so something quasi-similar could be done.
(Log in to post comments)
Qubes beta 1 released Posted Apr 14, 2011 17:56 UTC (Thu) by trasz (guest, #45786) [Link]
With lxc, you wouldn't solve the problems Qubes aims to fix (attack surface between userland and the kernel is simply too big; the whole protection would become useless with every exploitable security hole in kernel, which in Linux seems to happen every two months or so - and that's not including problems related to X11), and the overhead - administration overhead in particular - would be close.
|
|||||||||||||