Re: [Devil-linux-develop] Idea for DL: UML

[Heiko Z. <he...@zu...>]

Frank Pieczynski wrote:

>Hello,
>during reading the last german c't magazin I got a idea:
>what about adding UserModeLinux to DL?
>Some of the users may be use DL also for some services to the internal net.
>So adding UML would may be allow to save some hardware or bring in a 
>additional step of security.
>The idea is to have the UML kernel working only for firewalling (the normal 
>kernel works only as ethernet bridge to outside network) and may be ppp.
>All other things running as services on the normal kernel, so there is some 
>kind of DMZ in one hardware box.
>May be I miss it and this is already possible today?
>What do you think?
>
>  
>

The idea in general is not bad. There's also another project out there, 
which does Virtualization under Linux (similar to VMWare).

One question which comes to my mind is, does the UML Kernel work with 
grsecurity ? If not, then you would have an un-protected system which is 
actually worse then running everything on the main system.

I think it would be much better if people would start writing chroot 
configs for DL. The framework we provide makes this quite easy, it just 
takes somebody to do it.

-- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org