3 ms·
"If you're using KVM, ensure that you're using sVirt (either selinux or apparmor backed) in order to restrict qemu's privileges." What's wrong with qemu's supp
by rlpb 12y ago
"If you're using KVM, ensure that you're using sVirt (either selinux or apparmor backed) in order to restrict qemu's privileges."
What's wrong with qemu's support for AppArmor as available in Ubuntu? What does sVirt do that this doesn't do?
- eeZi 12y agosVirt has an AppArmor backend as well, so it's the same thing. The SELinux implementation appears to be more polished, though.