Hot answers tagged

4

There are with no doubt security mechanism in place to isolate non-global zones from each other as this is actually how zones were implemented by design. Excerpt from Introduction to Oracle® Solaris Zones A process assigned to a zone can manipulate, monitor, and directly communicate with other processes that are assigned to the same zone. The ...


2

Solaris 10 has a Common Criteria evaluation at EAL4+ of the Labelled Security Protection Profile. That separation is provided by Zones. Zones were designed to provide exactly this separation when deployed in the Trusted Extensions configuration. The original question describes a pretty much classic use case for a Solaris Trusted Extensions and there are ...


2

The -drive option takes parameters that look like this: qemu-system-x86_64 -drive format=raw,file=x86-64.img ... you need to use commas between its "sub"-options, not spaces. For example, here is one I tested to boot a Debian Installer CD: qemu-system-x86_64 -drive format=raw,media=cdrom,readonly,file=debian-8.2.0-amd64-DVD-1.iso


1

If you have set up a virtual serial console for your VM, you can use the virsh console command to connect to it. You will have to use an expect script to login with username and password, run your command(s), extract the output, and then logout. Note, though, that expect is a single-purpose language and, IMO, there's no point in learning/using it if you ...


1

In general Unix Domain Sockets cannot communicate between host OS and guest OS. Unix Domain Sockets are, like e.g. Named Pipes, bound to the OS kernel. If you open the same Unix Domain Socket file node in the host and the guest, you get two different virtual network connections. One in the host kernel and one in the guest kernel. These are completely ...


1

Google says this is a known bug. The recommended fix seems to be to use a (more) recent version of libvirt and virt-viewer.


1

Solution was to create the image in the openSUSE VM using SUSE Studio Image Writer, instead of ImageUSB, as the Windows program does not appear to image the ISO correctly. SUSE Studio Image Writer created a clean openSUSE installation and booted to it without issue.


1

The answer is kinda yes and kinda no. Zones rely on the same kernel running on the hosting LDOM or the physical server. If he kernel gets breached, all of them are hosed. But as far as server roles are considered, you can say that they are isolated, provided you did your networking setup due diligence real well. In an ideal world, you do not resort to this ...



Only top voted, non community-wiki answers of a minimum length are eligible