On 11/10/2010 01:51 PM, Matthew Thode wrote: > Disable kernexec and uderef on host for both AMD and Intel. > You can enable kernexec and uderef on AMD guests. > You can enable kernexec but not uderef on Intel guests. > > The intel processors tested were the core2duo, i3 and i7. > > -- prometheanfire >
Thanks for that info, it should go into the documentation I'm writing on hardened+virt. I only tested the amd guests and assumed it was the same for intel. -- Anthony G. Basile, Ph.D. Gentoo Developer