VirtualBox security

Skaperen · 10-24-2009, 06:39 PM

In the user manual for VirtualBox, it gives a command for how to allow all users to run it. It warns that this is not secure. There is some apparent risk because it's setting permissions for /dev/vboxdrv to 666.

My question is ... how is this a risk? Is the driver not able to discriminate between users in how it performs whatever functions it performs? Can one user write into another users virtual machines?

smeezekitty · 10-24-2009, 08:15 PM

it is exaggerated.
there is a slight possibility that malicious code could be executed from within the virtual box maybe damaging the host.

GlennsPref · 10-25-2009, 12:54 AM

You should be alright,

Quote:

Is the driver not able to discriminate between users in how it performs whatever functions it performs?

just use the winxp user-permissions to regulate which users can change stuff or access the system settings.

Quote:

Can one user write into another users virtual machines?

Administer as you would administering a multi-user window$ box.

also, Network access, Who can access shared folders etc.

The drivers should be fine.

Regards Glenn

GlennsPref · 11-01-2009, 03:19 PM

Also, as you may know, if you give admin privs to all winxp users, they can all access each others ..\My_Documents. so there is no real security at all.

Sadly, open access (ease of use) on winxp equals no privacy or security.

Be warned.

Regards Glenn