[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] syscall filtering

From: Paul Brook
Subject: Re: [Qemu-devel] syscall filtering
Date: Tue, 23 Nov 2004 14:33:46 +0000
User-agent: KMail/1.7.1

On Tuesday 23 November 2004 14:19, Magnus Damm wrote:
> Hello,
> While Piotrek is thinking about securing the system emulator, I am more
> interested in syscall filtering. I have not thought about it too much,
> but the idea (if possible) would be to run qemu as a filter for certain
> binaries on your machine. Basically, you run i386-user with filters on a
> i386 machine.

You would also need to add memory access protection. With the current user 
emulation it is possible for the emulated appliction to directly modify the 
emulator state.


reply via email to

[Prev in Thread] Current Thread [Next in Thread]