[ale] building a Linux sub-operating system layer for VMware server?

[Greg Freemyer]

2008/11/17 Ned Williams <nedj10 at gmail.com>:
>
> Ale'rs.
>
> I was wondering if anyone had built a stripped down Linux kernel with the
> base base base driver set to get Vmware server up and then afterwards
> booted the Virtual OS as a default startup function of OS (init.d or
> whatever). thus placing a layer of Linux and iptables etc etc between the VM
> os shall we say a user base's windows OS?
>
>
> TIA,
> Ned Williams

Check out ESXi (free from vmware, it is at least close to what you want.)

http://www.vmware.com/products/esxi/features.html

I don't know how it implements IP security, but if you go to the
bottom of the link you'll see that it offers:

    * Compatibility with SAN security practices.  Enforce security
policies with LUN zoning and LUN masking.
    * VLAN tagging.  Enhance network security by tagging and filtering
network traffic on VLANs. Limit the scope of broadcast domains.
    * Layer 2 network security policies.  Enforce security for virtual
machines at the Ethernet layer. Disallow promiscuous mode sniffing of
network traffic, MAC address changes, and forged source MAC transmits.

Not sure how they implement any of those, but they must have some kind
of filtering software installed.

Greg
-- 
Greg Freemyer
Litigation Triage Solutions Specialist
http://www.linkedin.com/in/gregfreemyer
First 99 Days Litigation White Paper -
http://www.norcrossgroup.com/forms/whitepapers/99%20Days%20whitepaper.pdf

The Norcross Group
The Intersection of Evidence & Technology
http://www.norcrossgroup.com