[release-notes] Virtualization security - BZ#746015

[John J. McDonough]

commit c54455cff2c58b8053b9b1ce1799880777d75a72
Author: John J. McDonough <jjmcd at fedoraproject.org>
Date:   Mon Oct 24 08:33:43 2011 -0400

    Virtualization security - BZ#746015
    
    Added note on compilation bits in qemu-kvm per bug.

 en-US/Virtualization.xml |   14 ++++++++++++++
 1 files changed, 14 insertions(+), 0 deletions(-)
---
diff --git a/en-US/Virtualization.xml b/en-US/Virtualization.xml
index a1eee14..fd925a2 100644
--- a/en-US/Virtualization.xml
+++ b/en-US/Virtualization.xml
@@ -58,6 +58,20 @@
       </listitem>
     </itemizedlist>
   </section>
+
+  <section>
+    <title>Security</title>
+    <indexterm><primary>qemu-kvm</primary></indexterm>
+    <indexterm><primary>RELRO</primary></indexterm>
+    <indexterm><primary>PIE</primary></indexterm>
+    <para>
+      The qemu-kvm package has been compiled with full RELRO and PIE
+      support which can help mitigate certain types of attacks.
+      Exploiting the host system or other VMs running on the same host
+      is more difficult with these compilation options.
+    </para>
+  </section>
+
   <section>
     
     <title>Upstream release notes</title>