WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-devel] RAM security

To: Jan Beulich <JBeulich@xxxxxxxxxx>, Xen-devel@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-devel] RAM security
From: Jonathan Tripathy <jonnyt@xxxxxxxxxxx>
Date: Mon, 06 Dec 2010 17:17:28 +0000
Cc:
Delivery-date: Mon, 06 Dec 2010 09:18:55 -0800
Envelope-to: www-data@xxxxxxxxxxxxxxxxxxx
In-reply-to: <4CFD196E.2080403@xxxxxxxxxxx>
List-help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-id: Xen developer discussion <xen-devel.lists.xensource.com>
List-post: <mailto:xen-devel@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>, <mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
References: <4CFD0FF5.1010808@xxxxxxxxxxx> <C92254B4.153B9%keir@xxxxxxx> <4CFD25F702000078000262DB@xxxxxxxxxxxxxxxxxx> <4CFD196E.2080403@xxxxxxxxxxx>
Sender: xen-devel-bounces@xxxxxxxxxxxxxxxxxxx
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6

On 06/12/10 17:12, Jonathan Tripathy wrote:
3) If the physical server was shutdown (e.g. plug pulled), I'm guessing
this will presetn a problem?
Xen scrubs all memory during boot, unless told not to via a boot parameter.

Now this bit of code makes me happy!

Just wondering, if Xen scrubs all memory during boot, why is booting the Hypervisor so fast? My machine has 8GB of RAM and starts nice and snappy..
It probably takes just a couple of seconds to scrub 8GB.
Plus it doesn't scrub the memory assigned to Dom0.

Doesn't this mean that if Dom0 releases some memory back to Xen, then Xen gives it to another domain, data leakage could occur?

Would one way to prevent this be to disable ballooning?
Silly me, Dom0 should scrub the RAM before releasing it back to Xen, as mentioned in previous post!

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel

<Prev in Thread] Current Thread [Next in Thread>