3 ms·
SVirt will usually use a per-VM label that should inhibit direct lateral interaction.
by mjg59 7y ago
SVirt will usually use a per-VM label that should inhibit direct lateral interaction.
- bonzini 7y agoFWIW, sVirt is the "code name" for Libvirt's SELinux labeling scheme. It uses SELinux multi-category security to ensure that each QEMU can only access resources destined to one VM.