Re: VM system for firewall use

[ArkanoiD <ark () eltex net>]

nuqneH,

Do you think Xen/TrustedBSD combo is viable solution or there is no good
reason to build such a monster?

On Mon, Oct 11, 2004 at 04:31:41PM -0400, Paul D. Robertson wrote:
> RSBAC, SE Linux, or TrustedBSD if it's far enough along.  MAC compartments
> are really nice for things like this, but jails aren't all that bad, the
> jail should result in a different process address space if you're using a
> different ID, shouldn't it- unless you're worried about the same kernel
> address space-  if so, UML has to be run on a kernel with SKAS enabled to
> negate that.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards