On Mon, 6 Jul 2009, Gene Czarcinski wrote:
Neat!
OK, this is starting to make more sense to me. I like the idea of using the MCS policy to protect guests from each other.
These slides from LCA should help explain the design further: http://namei.org/presentations/svirt-lca-2009.pdf
There's also a google video of the talk: http://video.google.com/videoplay?docid=5750618585157629496&hl=en
Dan Walsh is giving a talk on the topic at Linuxcon in September: http://linuxcon.linuxfoundation.org/meetings/1571
(which will be especially useful, as the code has evolved since the initial design).