Re: [Qemu-devel] kvm guest-host separation

2015-04-21 Thread Stefan Hajnoczi
On Fri, Apr 17, 2015 at 08:31:47PM +0200, Andrei Bacs wrote: > I would like to implement some security checks in the qemu user process > that would monitor the disk I/O of a KVM guest. You probably need to avoid QEMU's zero-copy disk I/O, depending on the security checks you are performing. Other

[Qemu-devel] kvm guest-host separation

2015-04-17 Thread Andrei Bacs
Hello, I would like to implement some security checks in the qemu user process that would monitor the disk I/O of a KVM guest. I am trying to understand if this is a good level for the implementation (such that the security checks are safe) or I need to do this at a lower level (possibly in the hy