3 ms·
> But it does help as an additional layer of security. You don't add security; you multiply the insecurity (think of traditional component reliability calculat
by _pmf_ 10y ago
> But it does help as an additional layer of security.
You don't add security; you multiply the insecurity (think of traditional component reliability calculation; a system that consists of one component with 50% reliability and another component with 50% reliability is not 100% reliable, but 25%).
- bonzini 10y agoYou can also think of virtualization in terms of redundancy. If you can break out of userspace and into the kernel, you now have to break out of the hypervisor (which has a smaller attack surface) in order to escape a very constrained environment. And by hypervisor I really mean the kernel module, because the device emulation is also running heavily constrained through pledge/seccomp/SELinux/whatever.