[$] KVM planes head for takeoff
Virtualization places a guest system into a separate security domain, typically with less privileges than software running directly on the host. Increasingly, there is interest in creating multiple security domains within a single virtualized system as well. CPU vendors (and software vendors too) are implementing solutions; each of which, of course, is different from all of the others. KVM…
We haven't written up this one. LWN has the full story — the link below goes straight to it.