Re:Hacked. A Short Story
by 0xCMP on Monday January 19, 2015 @01:29PM
(#8913185)
True, but even this isn't always perfect. I was told recently that Xen shares the kernel memory space among VMs so if once is compromised at the kernel level all of them could be compromised. This person dislikes using Amazon for this reason because he can't be sure his box isn't popped through another VM.
[ Parent
| on HN ]
Re:Hacked. A Short Story
by DanielDent on Monday January 19, 2015 @05:46PM
(#8914599)
Generally speaking, Xen-style virtualization is where each VM has their own copy of the kernel and their own memory space. There are new-ish features like transcendent memory which can blur the lines, but I don't think they are widely deployed.
Systems like docker, LXC, and virtuozzo are where you run into the issue you describe.