Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1756485Ab2BGMvy (ORCPT ); Tue, 7 Feb 2012 07:51:54 -0500 Received: from mail-pz0-f46.google.com ([209.85.210.46]:45573 "EHLO mail-pz0-f46.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756410Ab2BGMvx (ORCPT ); Tue, 7 Feb 2012 07:51:53 -0500 Message-ID: <4F311E64.10604@codemonkey.ws> Date: Tue, 07 Feb 2012 06:51:48 -0600 From: Anthony Liguori User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.23) Gecko/20110922 Lightning/1.0b2 Thunderbird/3.1.15 MIME-Version: 1.0 To: Avi Kivity CC: Scott Wood , Eric Northup , qemu-devel , KVM list , linux-kernel Subject: Re: [Qemu-devel] [RFC] Next gen kvm api References: <4F2AB552.2070909@redhat.com> <4F2C6517.3040203@codemonkey.ws> <4F302E0D.20302@freescale.com> <4F3118EA.7040302@codemonkey.ws> <4F311BBD.5050600@redhat.com> In-Reply-To: <4F311BBD.5050600@redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1088 Lines: 31 On 02/07/2012 06:40 AM, Avi Kivity wrote: > On 02/07/2012 02:28 PM, Anthony Liguori wrote: >> >>> It's a potential source of exploits >>> (from bugs in KVM or in hardware). I can see people wanting to be >>> selective with access because of that. >> >> As is true of the rest of the kernel. >> >> If you want finer grain access control, that's exactly why we have things like >> LSM and SELinux. You can add the appropriate LSM hooks into the KVM >> infrastructure and setup default SELinux policies appropriately. > > LSMs protect objects, not syscalls. There isn't an object to protect here > (except the fake /dev/kvm object). A VM can be an object. Regards, Anthony Liguori > In theory, kvm is exactly the same as other syscalls, but in practice, it is > used by only very few user programs, so there may be many unexercised paths. > -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/