Changes

For the a project such as OpenVZ, security of the software is of paramount importance. This is how we assure that OpenVZ is secure.

The OpenVZ kernel is based on the Linux kernel. The OpenVZ team is tracking tracks and analyzing analyzes all the security updates to the Linux kernel and applies them accordingly.

Note that the current stable kernel branch is based on the 2.6.8 18 kernel, which is quite old. This is done to achieve the maximum possible security and stability. By using the an older kernel, we do neither add avoid adding new bugs nor or security holes, but the old bugs and holes are getting discovered and fixed, and the kernel matures. Big vendors such as Novell and Red Hat are doing do the same for their enterprise Linux offerings: for example, Red Hat Enterprise Linux 4 is based on kernel 2.6.9.

OpenVZ has undergone a thourough thorough security audit , performed by Solar Designer in winter 2005. He found a single issue in OpenVZ kernel code and a couple of issues in mainstream Linux kernel code — all of them there were fixed, and the mainstream fixes were sent to the LKML.