[$] KVM planes head for takeoff

Virtualization places a guest system into a separate security domain,typically with less privileges than software running directly on the host.Increasingly, there is interest in creating multiple security domainswithin a single virtualized system as well. CPU vendors (and softwarevendors too) are implementing solutions; each of which, of course, isdifferent from all of the others. KVM planes, currently under developmentby Jorg Rodel, Paolo Bonzini, and others in the KVM community, is anattempt to provide an abstraction layer that makes all of these featuresavailable on Linux systems; it is not a small task.