SELinux-Based Secure Server Virtualization
Xun Yi Ren, Yu Yang · Advanced materials research · 2013
Server virtualization is to create and run several independent operation systems at the same time to maximize the utilization efficiency and flexibility of IT resource, the most serious security problem of which, however, is the unauthorized access of unsafe virtual machines. This paper presents a SELinux-based secure server virtualization method against the issue. With SELinux access control, virtual machine process is isolated from system processes by setting up different type labels and access control policies. Whats more, different virtual machine processes can be independent with each other by introducing Multi Category Security (MCS) protection mechanism, thus to achieve secure access of server virtualization. Finally the realization of the method is presented.