VIRTUAL COMPUTER SYSTEM, SYSTEM FOR FORCING POLICY, METHOD FOR FORCING POLICY, AND VIRTUAL COMPUTER CONTROL PROGRAM

摘要

A virtual computer system for building one or more virtual computers on a real computer has a hypervisor for realizing access to virtualized hardware by a guest OS which is an operating system running on the virtual computers or an application running on the guest OS by means of a physical device that the real computer has. The hypervisor includes a setting item information holding means for holding setting item information in which a security policy is indicated by the setting value of a setting item, a setting detecting means for monitoring an instruction executed by the guest OS and the output of the physical device to detect the setting value which is set in the setting item of the setting item information holding means or a setting value which is about to be changed therein, and a setting applying means for, when the detected setting value and the setting value indicated by the setting item information are different from each other, applying the setting value indicated by the setting item information to the guest OS or application which is the setting target of the setting item.