The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [kvm]

Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on x86 hardware containing virtualization extensions (Intel VT or AMD-V).

Filter by
Sorted by
Tagged with
8
votes
2answers
645 views

Does Docker provide the same security as a vm [duplicate]

Does Docker provide the same level of security/isolation as a virtual machine running over a hypervisor? If not, how can that be achieved?
5
votes
1answer
749 views

GPU passthrough security

How secure is the host operating system from the guest virtual machine's OS when using GPU passthrough (using the methods described here)? If the guest is compromised, can it permanently infect the ...
3
votes
1answer
519 views

Does Linux “Dirty COW” Exploit allow for escalation outside a virtual machine?

Vulnerability CVE–2016–5195 deals with privilege escalation in Linux systems. In a virtual environment with hypervisor KVM and QEMU, can a virtual machine get access to it's host? If not, what is the ...
3
votes
1answer
406 views

Are paravirtualized drivers a security risk?

Below is a copy of my answer that I gave in some other thread (Would running VMs inside of VMs be a more secure way to study viruses, etc?) about a topic of security of nested virtualization. I would ...
3
votes
1answer
132 views

How protected are files within a running encrypted VM on a possibly non secure hypervisor / host?

I've got a set of source code files (compiled C#) that I want to prevent direct read access to. The program will be running on the VM. I was thinking of storing these in an encrypted hard disk VM, the ...
3
votes
2answers
1k views

Can USB ethernet passthrough to a KVM virtual machine isolate network-related kernel vulnerabilities?

I'm worried about the attack surface that the linux kernel networking stack, including nic drivers and packet filtering, offers to a remote attacker. So I'm planning to isolate as much of the ...
3
votes
2answers
289 views

What lightweight sandboxing options do I have on linux?

What can I use to avoid running a full-fledged VM that gives me comparable security? Possibly, something like https://coreos.com/rkt/ but I don't know what their security properties are.
3
votes
1answer
131 views

Can information somehow be secured from the host on a KVM guest?

With KVM guest systems so prevalent now, I was wondering if there is any merit in using LUKS encrypted storage, as the guest will usually be always on, so the information is always accessible ...
2
votes
1answer
405 views

Is Meltdown/Spectre mitigation necessary in virtual machine as well as in hypervisor? [duplicate]

I am running virtual machines in kvm/qemu hypervisor. The hypervisor has Meltdown/Spectre mitigation enabled in kernel. Is it necessary that virtual machines have the Meltdown/Spectre mitigation ...
2
votes
1answer
835 views

CVE-2016-5195 - impacts on virtualization

I wonder if the recently found CVE-2016-5195 can be used to break out of KVM or OpenVZ virtualization to gain access to the host system? Basically, I believe that the local privileges can not be used ...
2
votes
1answer
1k views

Remote Administrative Access to a server, KVM over IP or HP iLo?

We have a situation. We want to grant remote administrative access to one of our servers for clients. As I know, there are two possible ways: 1- KVM-over-IP and 2-HP iLO. The most important thing for ...
1
vote
1answer
135 views

What are the security implications of enabling anonymous root/sudo access with sshd on a local guest VM?

Let's say that on my personal computer, I host a VM I use to do software development. My personal computer is connected to the internet and running Ubuntu 16.04 and my guest is CentOS 7. I don't want ...
1
vote
1answer
442 views

If a LUKS encrypted VM is put in saved state, will the master key be in clear on the host?

Let's assume the host is not encrypted, and all files on it are accessible. A VM with LUKS encryption is saved, meaning its memory is now residing as a regular file on the host, does that memory also ...
1
vote
1answer
2k views

How secure is QEMU/KVM? [closed]

I'm worrying about the security of the VM host machine (against guests) as the Kernel-Based Vitrual Machine operates at kernel level. UPDATE: Is there any guarantee that a guest can't manipulate/...
1
vote
1answer
58 views

Virtulization in cloud and security

From a security perspective, which type of hyper-visor cloud is more secure - one that runs on bare-metal (using minimal boot strap build into hyper-visor) or one which is loaded as a part of the OS ...
1
vote
1answer
459 views

Preventing outgoing Portscan/SYN/UDP Floods in the datacenter

We are a VPS hosting company that have servers housed in a datacenter in Germany. Currently we are receiving multiple take-down requests because customers are ports scanning or attacking servers ...
1
vote
0answers
310 views

Is it secure to enable KVM Device for Docker Runner in GitLab Continuous Integration?

I need to enable KVM for my android-ci Docker image to work for emulator based instrumentation tests. The Android emulator requires the kvm device. Therefore I specify the following in the Runner ...
1
vote
1answer
453 views

Memory dump from KVM snapshot, possible?

When we have a dedicaed server, noone can access to RAM data except the OS (for example Debian what working on). If someone want to get a RAM dump, without accessing to system, they need to freeze ...
1
vote
0answers
581 views

Xen vs KVM vulnerability frequency and disclosure [closed]

It seems like there's a new XSA every month. Amazon have rolling EC2 blackouts whenever they have to update Xen for a critical security issue. Linode moved from Xen to KVM partially for the security ...