Re: cloning and pre-freeze script question

[Marcelo V. <mv...@vm...>]

On 02/09/2011 11:24 AM, James Ko wrote:
> Is VIX really required for quiescing?   I would actually prefer to have VIX disabled as I see it as a potential
> security risk for the guest.

VIX is needed for quiescing on Linux, yes; that's how the freeze / thaw scripts
are executed. There are a few other operations from the UI that also need VIX
support in the guest, although I don't remember more details.

VIX requires guest authentication for most, if not all, of its operations. An
exception exists when the request comes from hostd, in which case VIX assumes
that hostd / VC are properly authenticating / authorizing the user to perform
that operation. So unless you have some concern regarding the latter, VIX
doesn't really add any security risks to the VM.

-- 
- Marcelo