[gbraad]

Knox is more like a namespace. This seems to run a kernel and allows for root execution, so I suspect it does emulation (as the name implies vm-os).