[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] chroot jailing...
|
From: |
Alex Bennée |
|
Subject: |
Re: [Qemu-devel] chroot jailing... |
|
Date: |
Mon, 13 Jan 2014 14:38:25 +0000 |
|
User-agent: |
mu4e 0.9.9.6pre2; emacs 24.3.50.3 |
address@hidden writes:
> Thanks!
>
> So it sounds like you're saying selinux is the only meaningful thing to try?
> Or do people ever bother to place qemu in chroot jails??
>
> I seem to have gotten the impression that people use qemu-static to do this,
> but it appears to be more for offering secured access of a guest folder
> to the host OS;
The qemu-static + chroot approach is mainly to avoid doing complex path
manipulation between host/guest file-systems AFAICT.
> not so much for security...
>
<snip>
--
Alex Bennée