[libvirt-users] security BPC

[Aleksei]

Hi,

 > - running VMs as different host OS users

Described here https://libvirt.org/drvqemu.html#securitydac

 > - secure time sync (with or without ntpd?)

Not sure what you mean by hardening here. You can set VM to get its time 
from the host (see here 
https://libvirt.org/formatdomain.html#elementsTime) and disable ntp in 
VM's OS.

/--Regards, Aleksei/

------------------------------------------------------------------------

*From:* Michael Ströder
*Sent:* Thursday, October 20, 2016 11:48AM
*To:* Libvirt-users
*Subject:* [libvirt-users] security BPC
> HI!
>
> Disclaimer:
> I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm.
>
> Is there any documentation describing how to harden libvirt/qemu-kvm installations?
>
> Escpecially how to improve isolation of VMs:
> - secure time sync (with or without ntpd?)
> - random number generation
> - running VMs as different host OS users
>
> I do not need general OS hardening advice.
>
> Ciao, Michael.
>
>
>
>
> _______________________________________________
> libvirt-users mailing list
> libvirt-users at redhat.com
> https://www.redhat.com/mailman/listinfo/libvirt-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20161020/a5a2efce/attachment.htm>