RE: [Xen-users] xen in hosting envoroment

["James Harper" <james.harper@xxxxxxxxxxxxxxxx>]

> Hi,
> 
> I am planning to offer a hosted xen server within my locality. My
> question is, is there any security issue that I should be aware of. I
> am currently letting user to choose which kernel they want to boot.
> 
> Is there any possibility, that with, say a recompiled kernel or kernel
> module, a user can actually gain access to the Dom0?

I've been developing Xen drivers for Windows, and I can tell you first
hand that it is definitely possible to crash at least some versions of
Xen by doing things wrong on a DomU. I'm talking about causing the
machine to hang or to reboot.

Even now, with the PV drivers working nicely, when I bring up the PV
network driver it will often kill all the tcp connections I have to
Dom0. I can re-establish them almost immediately, but there's still the
potential for a DomU to cause trouble. I'm not sure what the cause of
this is, possibly just a problem of having the same MAC address in two
locations causing the bridge to hiccup.

James

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users