Re: [Isolated-exec-devel] [Xen-research] Security through Isolation in Xen

[Passera, P. R <pab...@in...>]

>Even withough closing, trying to run notepad again, I get a NO_FREE_VM
>error on the user VM...

After closing notepad the VM should be restarted and once is up and running again, the decision module will add it automatically to the VMPool. This takes like 45 seconds. After that you can send an application again. If you have more than one VM in the pool, you can send the application immediately and the decision module will pick another VM from the pool while the first one is starting.

>I see, I only have one sandbox VM... So it looks like I can
>uncomment/make more in /etc/vmpool.conf right?

Yes, that is correct.

>Does anybody have a Linux Sandbox VM that I could download? If not,
>I'll try to make a Linux one (with wine installed)...

You can do that or you can copy the windows image and configure the network in it (you can put 192.168.0.2 to this other one). Also you will have to modify vmpool.cfg to point to the correct xen config file for this new machine and all the other configurations there. If you install a linux machine with wine remember to install the migration module in wine. Unfortunately, I don't have here a linux image ready to run.

Regards,
Pablo

>-----Original Message-----
>From: Todd Deshane [mailto:des...@gm...]
>Sent: Tuesday, January 27, 2009 3:29 PM
>To: Passera, Pablo R
>Cc: Protti, Duilio J; Giusti, Gisela; Colsani, Guillermo E; isolated-
>exe...@li...
>Subject: Re: [Xen-research] Security through Isolation in Xen
>
>On Tue, Jan 27, 2009 at 12:02 PM, Passera, Pablo R
><pab...@in...> wrote:
>> Mmm, it should have closed automatically after closing Notepad.exe. In
>this way the decision module will restart the VM and add it to the
>VMPool. I will try to reproduce the error in our installation.
>>
>
>Even withough closing, trying to run notepad again, I get a NO_FREE_VM
>error on the user VM...
>
>I see, I only have one sandbox VM... So it looks like I can
>uncomment/make more in /etc/vmpool.conf right?
>
>Does anybody have a Linux Sandbox VM that I could download? If not,
>I'll try to make a Linux one (with wine installed)...
>
>Cheers,
>Todd
>
>> Pablo
>>
>>
>> PS: I am copying Isolated-exec distribution list so this so others can
>benefit from this also. Could you copy the list also?
>>
>
>Sure :)
>
>
>--
>Todd Deshane
>http://todddeshane.net
>http://runningxen.com