On Wed, Jun 07, 2006 at 12:33:49PM +0100, Justin Mason wrote:
> Key point for me -- imagine being able to install an insecure swiss-cheese
> PHP app like Gallery and *not* have to worry about all your important data
> getting pwn3d!
Unfortunately, that's just not reality. Virtualisation offers only
marginally more security than a chroot. As the user still gets native
raw access to the hardware, it's always going to be possible for them to
simply crawl the bus devices and do whatever they feel like. If they
root your virtualised instance, they still have the potential for
interfering with the other ones.
Only emulation could come close to what you're talking about :-)
--
Colm MacCárthaigh Public Key: colm+pgp at stdlib.net
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
