Hi,

> - running VMs as different host OS users

Described here https://libvirt.org/drvqemu.html#securitydac

> - secure time sync (with or without ntpd?)

Not sure what you mean by hardening here. You can set VM to get its time from the host (see here https://libvirt.org/formatdomain.html#elementsTime) and disable ntp in VM's OS.

--Regards, Aleksei

From: Michael Ströder
Sent: Thursday, October 20, 2016 11:48AM
To: Libvirt-users
Subject: [libvirt-users] security BPC

HI!

Disclaimer:
I'm a libvirt beginner using it for managing virtual machines based on qemu-kvm.

Is there any documentation describing how to harden libvirt/qemu-kvm installations?

Escpecially how to improve isolation of VMs:
- secure time sync (with or without ntpd?)
- random number generation
- running VMs as different host OS users

I do not need general OS hardening advice.

Ciao, Michael.

_______________________________________________
libvirt-users mailing list
libvirt-users@redhat.com
https://www.redhat.com/mailman/listinfo/libvirt-users