3 ms·
Not a tutorial but there's a distro which does this. https://www.qubes-os.org/doc/architecture/ https://www.qubes-os.org/doc/architecture/
by yxlx 11y ago
Not a tutorial but there's a distro which does this.
https://www.qubes-os.org/doc/architecture/ https://www.qubes-os.org/doc/architecture/
- gravypod 11y agoI didn't think qube-os did this since I don't think this would be very secure. There are, from what I understand, many vectors for privilege escalation from the XServer. Didn't think Qube os would use it since it is security concerned.
- dmytrish 11y agoQube OS is made by quite good security researchers, who where first to break into Intel SMM, as far as I know. Qube OS separates domain as virtual machines on top of Xen and you need to do privilege escalation in the sandbox first, then to break Xen somehow. Sure, Xen is still a lot of code to attack, but it's much smaller than Linux kernel or XWindow.