WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

[Xen-devel] Hypervisor to dom0 communication

To: xen-devel <xen-devel@xxxxxxxxxxxxxxxxxxx>
Subject: [Xen-devel] Hypervisor to dom0 communication
From: Matthew Donovan <matthew@xxxxxxxxxxxxxx>
Date: Thu, 10 Jul 2008 08:26:09 -0400
Delivery-date: Thu, 10 Jul 2008 05:18:42 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
 
I am working on a security tool that monitors various components (IDT, SSDT,
etc) of a domU using VM introspection.  Currently, we're using a polling
method to monitor these in-core structions.  We would like to be able to use
a blocking method instead.  I.e. specify "interesting" memory ranges and
then wait until they are modified.

How can I get the hypervisor to alert a kernel module loaded in dom0 that
something has happened?  Can the alert include extra information such as the
address that was modified?      


Thanks
-matthew

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel

<Prev in Thread] Current Thread [Next in Thread>