From mboxrd@z Thu Jan 1 00:00:00 1970
Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org)
by finch.gentoo.org with esmtp (Exim 4.60)
(envelope-from <gentoo-hardened+bounces-2697-garchives=archives.gentoo.org@lists.gentoo.org>)
id 1MaKzg-0000sz-Ae
for garchives@archives.gentoo.org; Mon, 10 Aug 2009 02:52:16 +0000
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
by pigeon.gentoo.org (Postfix) with SMTP id 50D8BE0457;
Mon, 10 Aug 2009 02:52:15 +0000 (UTC)
Received: from mail-ew0-f210.google.com (mail-ew0-f210.google.com [209.85.219.210])
by pigeon.gentoo.org (Postfix) with ESMTP id 1371EE0457
for <gentoo-hardened@lists.gentoo.org>; Mon, 10 Aug 2009 02:52:14 +0000 (UTC)
Received: by ewy6 with SMTP id 6so905819ewy.34
for <gentoo-hardened@lists.gentoo.org>; Sun, 09 Aug 2009 19:52:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:in-reply-to:references
:date:message-id:subject:from:to:content-type
:content-transfer-encoding;
bh=qH2E4s1SO55Y7FDq6xBYOhVW0rIXKHyHfP33blkXJ28=;
b=T3ta+KZUIcFflckW8QQi4/WtZ+eiMNrqJX0/baUKSkKGWxXKrusNMpAMDfHwkB99Cn
gyUk2HfuNkY1Sf06dh4EFSwCdggoDem84yP7CnDDm/pXdRnOGnZgjDGLvGUO61WCw/wq
hFd8190epPsod0/u49rPnO4jafN7SKXBP7Fao=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type:content-transfer-encoding;
b=BqV5/7O3gaRdnmSnlfJBRKYzLiuv76lU21mgwQUx80iKZmUaCKspnuRxgtPMj+4Qfz
k6EjajWuImMIPKf+NWfc2au1aRGCaE0tCVnq9LdnyLWvDBS33GYJzfTRK9knCJ39Mm24
tqvYhw5lwdfsyXu9Bo8uqP92pCCFkmGvgxauo=
Precedence: bulk
List-Post: <mailto:gentoo-hardened@lists.gentoo.org>
List-Help: <mailto:gentoo-hardened+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-hardened+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-hardened+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-hardened.gentoo.org>
X-BeenThere: gentoo-hardened@lists.gentoo.org
Reply-to: gentoo-hardened@lists.gentoo.org
MIME-Version: 1.0
Received: by 10.210.137.18 with SMTP id k18mr4587178ebd.43.1249872733699; Sun,
09 Aug 2009 19:52:13 -0700 (PDT)
In-Reply-To: <20090810015829.1dec284c@mpismpirikos.tolises.homeunix.org>
References: <20090808213543.260ad68f@mpismpirikos.tolises.homeunix.org>
<4A7DD1CA.7090209@orlitzky.com>
<20090810015829.1dec284c@mpismpirikos.tolises.homeunix.org>
Date: Sun, 9 Aug 2009 20:52:13 -0600
Message-ID: <4255c2570908091952s6d04c383ycd72325e563eddf1@mail.gmail.com>
Subject: Re: [gentoo-hardened] virtualization with gentoo hardened
From: RB <aoz.syn@gmail.com>
To: gentoo-hardened@lists.gentoo.org
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Archives-Salt: 3363a7d4-c053-4add-9c5f-f523c154c4d8
X-Archives-Hash: 452c36372e5de8a81170d3e0a9c7599d
On Sun, Aug 9, 2009 at 16:58, Yiannis<yiannis@tolises.homeunix.org> wrote:
> Can you plz elaborate on your setup? Is host & guest os
> both using grsec+pax? Are you using the xake-toolchain? Any
> drawbacks? This seems (to me) that is the most secure solution, and
> maybe I should consider upgrading my pc.
I use this setup too, and there isn't much to elaborate on -
xake-toolchain, host is running grsec+pax, and I'm running various
guests (hardened thru OS X). Having recently gone from a P-III setup
to a Phenom myself, it's completely worth it. I've had a few
inexplicable guest crashes, but that's more probably due to running on
the bleeding edge than anything.