We currently don’t have security tests (unless I’m wrong—and I’d love to be wrong if someone has this work hiding somewhere!), but it’s something I think we need to have and should prioritize as a community. Jesse, would you be able to outline what info would make some sort of ‘security health check’ valuable? What’s the output that would make it useful? (Bonus points if you’re also up for leading the charge in getting this work done!) Anne Bertucio OpenStack Foundation anne@openstack.org | irc: annabelleB

On Aug 22, 2018, at 7:46 AM, Larrew, Jesse <Jesse.Larrew@amd.com> wrote:

Hi all,

Are there any tools or tests available that aim to validate the security promises of the Kata architecture? I've looked in the testing repo, but that seems to contain mostly functional tests. I'm interested in something that could be used to validate statements like, "The guest cannot do X. The host cannot do Y. Etc." Does something like this exist for Kata?

Sincerely, Jesse

_______________________________________________ kata-dev mailing list kata-dev@lists.katacontainers.io http://lists.katacontainers.io/cgi-bin/mailman/listinfo/kata-dev