From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1PGFwB-00032K-EV for garchives@archives.gentoo.org; Wed, 10 Nov 2010 19:02:27 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B431DE081E for ; Wed, 10 Nov 2010 19:02:26 +0000 (UTC) Received: from mx1.mthode.org (mx1.mthode.org [70.88.176.253]) by pigeon.gentoo.org (Postfix) with ESMTP id 0BB21E0814 for ; Wed, 10 Nov 2010 18:54:32 +0000 (UTC) Received: from [192.168.0.104] (unknown [65.207.151.254]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.mthode.org (Postfix) with ESMTPSA id 641F21303 for ; Wed, 10 Nov 2010 13:54:32 -0500 (EST) Message-ID: <4CDAE9C6.2060306@mthode.org> Date: Wed, 10 Nov 2010 13:51:50 -0500 From: Matthew Thode User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.9.2.12) Gecko/20101031 Lightning/1.0b3pre Thunderbird/3.1.6 ThunderBrowse/3.3.2 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 To: gentoo-hardened@lists.gentoo.org Subject: [gentoo-hardened] kvm on hardened (findings) X-Enigmail-Version: 1.1.2 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig9573BC8A740E2B9469411340" X-Archives-Salt: b34bf91e-cb32-4748-bc6f-0a3121f6d7d9 X-Archives-Hash: fd9752bb476997399b5e308171204460 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig9573BC8A740E2B9469411340 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Disable kernexec and uderef on host for both AMD and Intel. You can enable kernexec and uderef on AMD guests. You can enable kernexec but not uderef on Intel guests. The intel processors tested were the core2duo, i3 and i7. -- prometheanfire --------------enig9573BC8A740E2B9469411340 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.16 (GNU/Linux) iQIcBAEBAgAGBQJM2unNAAoJECRx6z5ArFrDCyQQALzbKRlcSwBXM4C/rM/4YzCm N9V93y79IDlMhVwgQ0zhBl9iBQUnQJnin7YfPusrp3M6dYuFeQjwuvgCVrrSvm44 p23QXzumBfMPOOR2y3HSgl4r8rEzNPh+I73vTWSl5QT2mA5d3sbM12N3Oc8nsr9b xOSDfHIQvioyH5GB6vn8Om50teVAhur1/x43v5Q57ph/Pluedd4Rzkuv+a0BhfFZ dIYKKuFl3gbq3uwWHcvKRDs/97kH9YrfJ1QQj9ehvEIKWGfohfs2C133IygtfIAe BUgTJe8Q6BHQUuczvcX/avscRGW/iqhXzA50ksh3SmmPYqTiSXU2cgQirazBBL29 eBBb3B7W6wp0zLk/aUEa/YpYzmPUlOSvXtWsajREFkAOa9H84FiFmIPR84QR07nr fl1toH8PVowc2ESRdZa7/TuTM8Ff5S1zV46YJmzW1lwpr/i9ZVf2o09qrhXoadFa FNqTfuyrsb1ZIy5YMh+KMWzeCqQ8ePyAcH1diUOOAfFde6pZjqbTm5hHBt8uC5/n Ww0d+5JmHSFoLc+99JMSGBjaBDut/+kQWba0k3RkCaH2hUd19T/PTnRJwDWyNnZC R+gkb/OEdxYSXPWztJ3jbyi+RYoCOyQeb8WPjV1Xv+n8hAQEB+7qUj4ZxR9+ICvT hazVx5p1DpNFEZQqx2ir =3F6o -----END PGP SIGNATURE----- --------------enig9573BC8A740E2B9469411340--