[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-devel
Subject:    Re: [qubes-devel] Qubes Security Bulletin #22 (Critical bug)
From:       Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= <marmarek () invisiblethingslab ! com>
Date:       2015-10-30 11:52:58
Message-ID: 20151030115258.GD877 () mail-itl
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Thu, Oct 29, 2015 at 11:13:25PM +0000, Axon wrote:
> On a more sober note, I was surprised by this comment in the QSB:
> 
> > This bug might also be considered an argument for the view of 
> > ditching of para-virtualized (PV) VMs, and switch to HVMs,
> 
> Seems like many (most?) of the serious Xen bugs *before this one*
> affected only HVMs. Out of the frying pan and into the fire?

Actually most (all of them?) privilege escalation bugs of HVMs 
were qemu bugs, which we have sandboxed in stub domain.

> > or better yet: PVH VMs for better isolation.
> 
> Sounds like the best (=least bad) option.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJWM1oZAAoJENuP0xzK19cs/7MH+wcTEky51E+GDl1nIu2brnVl
Ov8nIasMyX9o3VqS9EsW/lVesQ1532ChmrnG1V9QmWgpKRNBfKiL3oizKpK21kke
0LE4bZC4QjBMAfp8WRuRkF8v+rQWNsbq1/bbaiPTTadfn3pIxX0PXcnzdUc8oeT2
DSR1MkJbT4MFTJTZxy033FVG1yZR7UP809ZkTwY52PLquH+FbPX2Wo8LzJfxlpnw
sMuE4JfwCxjJQHF2CdoFohfkfD6TDTxU+XR4MYYvTEJNkKb1gCJjSZDP5vr6IV72
MRbLDuKRDoLsM0o2xBsrPWjhFYkTDeMj3U7Pf3fC6HFq+XukfrLrD6Nb9XmtLmk=
=oRZ7
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/20151030115258.GD877%40mail-itl. For \
more options, visit https://groups.google.com/d/optout.


[prev in list] [next in list] [prev in thread] [next in thread]