[Info-vax] Now you have way more things to worry about

[David Turner]

I know that when I sell to Integrity servers and Alphaservers into 
sensitive (GOV and Intl GOV) sites,considering  things like VMWARE or 
VirtualBox or emulatos- these are considered middleware, and t'is  a 
Grand Non Non to GOV customers unless tested and proven for years prior 
to purchase.
And even then, I am sure certain sensitive environments would not even 
consider something like OPenVMS not running natively.
...  I know some are using emulators in very specific environments, but...




On 7/7/2023 2:49 PM, Arne Vajhøj wrote:
> On 7/7/2023 2:34 PM, Pizza RAC wrote:
>> On Friday, July 7, 2023 at 10:29:36 AM UTC-4, David Turner wrote:
>>> https://www.bleepingcomputer.com/news/security/vmware-fixes-vrealize-bug-that-let-attackers-run-code-as-root/ 
>>>
>>>
>>> So you have exploits that affect the x86 EFI
>>> Then you have exploits that hit VMWare
>>> So before you even run OpenVMS you have two major issues to be 
>>> concerned about.
>>>
>>> Is VSI ever going native X86 OpenVMS (on Proliant DL380 G10?)or it 
>>> is still a "layered" piece of cheesecake?
>>
>> That is what I have been asking them for months ...
>
> Answers has been given.
>
> The latest I saw was here:
>
> https://forum.vmssoftware.com/viewtopic.php?f=37&t=8689
>
> <quote>
> We have no current plans to support x86 VMS on bare metal. Would we if 
> someone offered us a very large pile of money? Maybe, but it would 
> have to be a very unique situation.
> </quote>
>
> Which does not sound promising for VMS x86-64 support for
> physical server.
>
> I still hope that they eventually will decide to support one server
> for those that has a need for physical.
>
> There is also a thread for people that despite it not being supported
> actually runs it on physical:
>
> https://forum.vmssoftware.com/viewtopic.php?t=8621
>
> so if support does not matter then it is possible.
>
> Arne
>