3 ms·
Yes it is both now. The host patch protects against vm-to-vm leaks, but you still need to protect your vm against application-to-application leaks. When I wro
by chrisper 9y ago
Yes it is both now.
The host patch protects against vm-to-vm leaks, but you still need to protect your vm against application-to-application leaks.
When I wrote the other comment it was at the time I did not have all the information we have now. Like it took me some time to read into it.
- amluto 9y agoThe host PTI patch does nothing whatsoever to protect from attacks initiated by a guest. (Well, if host QEMU gets compromised, PTI protects the host kernel a bit.)