And in turn most QEMU vulnerabilities are closed by SELinux of your distribution...

bonzini on March 29, 2017 | parent | context | favorite | on: Containers vs. Zones vs. Jails vs. VMs

And in turn most QEMU vulnerabilities are closed by SELinux of your distribution enables it. Libvirt (and thus the virt-manager GUI) automatically confine each QEMU process so that it can only access the resources for that particular VM.