Messages in this thread | | | Subject | Re: [RFC] Virtualization steps | From | (Eric W. Biederman) | Date | Thu, 30 Mar 2006 11:00:19 -0700 |
| |
Herbert Poetzl <herbert@13thfloor.at> writes:
> sorry folks, I don't think that we _ever_ want container > root to be able to load any kernel modues at any time > without having CAP_SYS_ADMIN or so, in which case the > modules can be global as well ... otherwise we end up > as a bad Xen imitation with a lot of security issues, > where it should be a security enhancement ...
Agreed. At least until someone defines a user-mode linux-security-module. We may want a different security module in effect for a particular guest. Which modules you get being defined by the one system administrator is fine.
The primary case I see worth worry about is using a security module to ensure isolation of a container, while still providing the selinux mandatory capabilities to a container.
Eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |