Good day, Izak.

Thank You for Your reply:
>Linux vserver shares the kernel between the various virtual hosts, a
>little like BSD jails. There are restrictions on what one can do: not
>even root can modify network interfaces or even create a node (using
>mknod) or mount a filesystem, so breaking out of the virtualhost is
>pretty hard. No guarantees, but to answer your question, yes, it does
>protect the host OS.

Ok, what is Your opinion on qemu guest - does it offer more
protection/guarantee?


-- 
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to