add notes from security sig yesterday

Signed-off-by: Tycho Andersen <tycho@docker.com>
This commit is contained in:
Tycho Andersen 2017-08-17 08:23:58 -06:00
parent 44c4ea5dba
commit a42d911d86

View File

@ -16,3 +16,11 @@ Previous meeting notes: [2017-08-02](2017-08-02.md)
- please feel free to propose additional deep dives and discussion topics!
## Meeting Notes
- okernel intro by HPE [slides](https://files.tycho.ws/linux-okernel.pdf)
- Question: is it possible to do KVM and okernel stuff on the same machine
given that they both use EPT? Answer: theoretically yes, but untested.
- Question: what's the goal of this work? Answer: definitely upstreaming it
at some point, although some cleanup and such needs to happen.
- Question: what's the interest in XPFO? Answer: want to track when +x pages
come back from userspace, so that we can set them -x.