* Daniel P. Berrange (berrange(a)redhat.com) wrote:
On Thu, Jul 23, 2009 at 11:35:17AM -0700, Chris Wright wrote:
> * Mark McLoughlin (markmc(a)redhat.com) wrote:
> > I'd suggest /dev/hugepages as the default - /hugetlbfs has an seriously
> > unstandard whiff about it
>
> What about /var/lib/libvirt/qemu/hugetlb and having the whole thing under
> libvirt's control? It can allow for better security I think.
Does hugetlbfs support extended attributes ? If so, the sVirt will
automatically ensure isolation of each VM's backing file. If it
doesn't supported extended attrs, then using hugetlbs at all would
seem to blow a huge hole in our security model ...
You should be able to specify a per mount point security context.
There is no xattr support for hugetlbfs.
thanks,
-chris