Re: [Xen-users] which is the best way to setup DomU's kernel location

[Ian Murray <murrayie@xxxxxxxxxxx>]

----- Original Message ----
> From: Ady Deac <ady@xxxxxxxxxxx>
> To: Ian Murray <murrayie@xxxxxxxxxxx>
> Sent: Sunday, 20 September, 2009 10:33:43
> Subject: Re: [Xen-users] which is the best way to setup DomU's kernel location
> 
> Hi Ian,
> 
> Heh, you learn something new each day. ;) Thanks for the tip!
> 
> Anyways, you still need to build the custom kernel. :P
> 
> Have phun!
> 

Hi,

No you don't. I am using pygrub with all my PV DomU's, using the
standard distribution kernels that come with CentOS 5.x in both Dom0
and DomU.

Of pvGrub and pyGrub, I think pvgrub is the preferred option because of 
inherent security problems with pyGrub, but is available on newer hypervisors 
and not on the std CentOS hypervisor. I think the security issue goes along the 
lines of the DomU can affect something that runs on the Dom0 (pyGrub) by 
manipulating the grub menu in the DomU. This could be part of an attack, if 
some other vector is discovered in pygrub. Something like that, I think. I am 
sure some one will correct me, if I am wrong about that.

HTH,

Ian.





_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users