Qemu/KVM: Protection between Guests

StackOverflow https://stackoverflow.com/questions/13895322

Question

On http://libvirt.org/drvqemu.html#securitysvirtaa it says with Apparmor there is no protection between guests. When I use libvirt under ubuntu with active apparmor to start a guest than it creates automatically policy-files for each guest. Do they meant a process specific protection?

Was it helpful?

Solution

Apparmor default only includes protection of the Host from Guest compromise. Apparmor with libvirt adds the extra security protection needed to protect guests from each other. See this and this.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top