>With Xen you get an entire, complete, true "virtual" host and everything
>works exactly as anyone would expect it to.
>
>-- 

Xen is great for heavy-weight confinement, but it takes a lot of effort 
-- you have to build (and maintain) an entire extra NetBSD image for 
each such app.

The interesting question, of course, is whether or not there are 
lighter-weight solutions that will do the trick.


		--Steve Bellovin, http://www.research.att.com/~smb