Clearly I was referring to off site VM's, not VMs that are running on your server.
When it comes to privilege separation & isolation, I am doubtful if VM's are actually that good considering how complicated hypervisors are and how many escapes have been found. Things like SELinux seem to be less complicated and tends to spam hard to syslog if someone is trying to bypass it.
翠星石 /
npub1lt…ynuyv
2024-09-08 06:33:13
in reply to nevent1q…hr8j
Author Public Key
npub1lteytmkwe0d84tpngrt86e2ysh5wyh4cngl04cekfywx0732r20q7ynuyvPublished at
2024-09-08 06:33:13Event JSON
{
"id": "6d9c8ef90853626e27374b62e4d77c38a3ffd42db816c04ec6c2702ece891d3c",
"pubkey": "faf245eececbda7aac3340d67d654485e8e25eb89a3efae336491c67fa2a1a9e",
"created_at": 1725777193,
"kind": 1,
"tags": [
[
"p",
"8ab44a84fb757fea3c983e68a9bcc8e331fa49ed99cfcfd06a4499d542eae93c"
],
[
"e",
"f7bc6a00e8b039b0a9c811a22c3f5a7aac261aaebf9fc8fee6e92d4a1c0f9a03",
"",
"reply",
"8ab44a84fb757fea3c983e68a9bcc8e331fa49ed99cfcfd06a4499d542eae93c"
],
[
"p",
"7ed55415edb6952b225bee408f52d48461f6f591e7a5f326c906dd48cd2d7879"
],
[
"p",
"faf245eececbda7aac3340d67d654485e8e25eb89a3efae336491c67fa2a1a9e"
],
[
"e",
"88666aa2ac257d61b21defe678a49a33588f836f3e86a7f86580a29a7d1c254f",
"",
"root",
"7ed55415edb6952b225bee408f52d48461f6f591e7a5f326c906dd48cd2d7879"
],
[
"proxy",
"https://freesoftwareextremist.com/objects/e3289e5d-4baa-4ada-849e-3d320b2a0514",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://freesoftwareextremist.com/objects/e3289e5d-4baa-4ada-849e-3d320b2a0514",
"pink.momostr"
],
[
"-"
]
],
"content": "Clearly I was referring to off site VM's, not VMs that are running on your server.\r\n\r\nWhen it comes to privilege separation \u0026 isolation, I am doubtful if VM's are actually that good considering how complicated hypervisors are and how many escapes have been found. Things like SELinux seem to be less complicated and tends to spam hard to syslog if someone is trying to bypass it.",
"sig": "20e111a2b05b988d878b1f7ee99c9d7fd55b7f65c1c4d0a1edfb8e6c01b6e2239fddc7ee25af139999dae95123d22f9674b0a2cd65f406b5a7b42ee56dc5b93e"
}