News for hackers. Stuff that matters.

A comment on Qubes OS: A reasonably secure operating system. Parent comment

Re:Qubes OS: A reasonably secure operating system by walterbell on Sunday November 19, 2017 @01:08PM (#15735029)
Qubes mailing list thread about hypervisor choices:

https://groups.google.com/forum/m/#!topic/qubes-devel/jEe4pQ...

> It seems one major residing problem with KVM is the Linux kernel (which is large and vulnerable). A port of KVM to a thinner base layer would obviate those issues.

[ Parent | on HN ]
Re:Qubes OS: A reasonably secure operating system by nickpsecurity on Sunday November 19, 2017 @07:03PM (#15736709)
One of the trends I told Joanna about (i.e secure L4 kernels) led to folks developing exactly that. It was called KVM-L4. Here you go.

http://os.inf.tu-dresden.de/papers_ps/liebergeld-diplom.pdf

Complexity was still yoo high. Most in high-assurance security were trying stuff like Nova microhypervisor as a result. KVM on separation kernels might be worth further investigation for these platforms that will stay on KVM regardless.

[ Parent | on HN ]