RE: [Xen-users] If Dom0 was compramised

["Ian Tobin" <itobin@xxxxxxxxxxxxx>]

Curious, what would be the best way to secure the Dom0.

Ive tried iptables before but then prevented access to the DomUs.

Ian



-----Original Message-----
From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Fajar A.
Nugraha
Sent: 20 May 2010 11:02
To: Jonathan Tripathy
Cc: Xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] If Dom0 was compramised

On Thu, May 20, 2010 at 4:53 PM, Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
wrote:
> Hi Everyone,
>
> If Dom0 were to get compramised, how bad would this be? How much
access to
> the DomUs does Dom0 have?

With physical servers, It would be the equivalent of someone having
access to your SAN (disks) and network switch/routers.
Results might include anything from man-in-the-middle-attacks or data
theft.

-- 
Fajar

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users