| |||||||||||||
Qubes 1.0 releasedQubes 1.0 releasedPosted Sep 6, 2012 1:20 UTC (Thu) by richarson (subscriber, #74226)In reply to: Qubes 1.0 released by dlang Parent article: Qubes 1.0 released
Actually, you don't *have* to use one VM per app but you *can* do it if you are sufficiently paranoid and have the resources (memory, mostly).
Check for example:
http://theinvisiblethings.blogspot.com/2011/03/partitioni...
Cheers
(Log in to post comments)
Qubes 1.0 released Posted Sep 6, 2012 2:28 UTC (Thu) by dlang (✭ supporter ✭, #313) [Link]
remember the question was which is better.
I agree that a full VM isolation is better than container isolation
However I also say that separating ever app is more secure than only splitting them into different bundles.
If you don't have the resources to run full VM isolation, are you better off with VM isolation in bundles, or full container isolation?
even partial VM isolation will take more resources than container isolation, how much more depends on a lot of factors.
|
|||||||||||||