On 11/10/2010 01:51 PM, Matthew Thode wrote:
> Disable kernexec and uderef on host for both AMD and Intel.
> You can enable kernexec and uderef on AMD guests.
> You can enable kernexec but not uderef on Intel guests.
> 
> The intel processors tested were the core2duo, i3 and i7.
> 
> -- prometheanfire
> 

Thanks for that info, it should go into the documentation I'm writing on
hardened+virt.  I only tested the amd guests and assumed it was the same
for intel.

-- 
Anthony G. Basile, Ph.D.
Gentoo Developer

Reply via email to