Walsh: Secure Virtualization Using SELinux (sVirt)
Walsh: Secure Virtualization Using SELinux (sVirt)
Posted Aug 24, 2009 22:21 UTC (Mon) by mmcgrath (guest, #44906)In reply to: Walsh: Secure Virtualization Using SELinux (sVirt) by caitlinbestler
Parent article: Walsh: Secure Virtualization Using SELinux (sVirt)
> A more productive approach to security would be to have a small, stable
kernel(Hypervisor) and disaggregate the backend device drivers into
separate domains.
kernel(Hypervisor) and disaggregate the backend device drivers into
separate domains.
Why can't you have both? SELinux isn't that much bloat. And even the smallest of kernels will have a vulnerability at some point. SELinux can help mitigate that risk.
The LWN site is currently under high scraper load, so comment display has been suppressed for anonymous users. If you are a human, you may read the comments by clicking the button below:
Note: you can avoid this step in the future by logging into your LWN account.