Virtual machine system, policy enforcement system, virtual machine control program and policy enforcement methods

摘要

A virtual machine system to build a virtual machine of one or more real machine on, the virtual computer system is virtualized by applications running on the guest OS the guest or OS is an operating system that runs on a virtual machine I have a hypervisor to achieve by the physical device provided in the real computer, access to the hardware was. And setting item information holding means for holding the setting item information indicated by the setting value of the setting item is security policy, by monitoring the output of the physical device and the instruction executed by the guest OS, hypervisor, preference settings information holding means When the set value indicated by the setting item information setting detection means for detecting the settings that are to be modified or set values ​​are set in the item, the setting value detected is different, a setting target of the setting item I prepare for the guest OS or application there, and setting application means to apply the configuration value indicated by the configuration item information.