[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] Readonly memory for guest domain


  • To: "Keir Fraser" <Keir.Fraser@xxxxxxxxxxxx>
  • From: "Peter Teoh" <htmldeveloper@xxxxxxxxx>
  • Date: Thu, 13 Sep 2007 09:59:59 +0800
  • Cc: xen-devel@xxxxxxxxxxxxxxxxxxx
  • Delivery-date: Wed, 12 Sep 2007 19:00:22 -0700
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references; b=UAzT5EU3jnRGBa8xN38IRgH7i0symz422dhtweukLkIH/zvi3zGiRuxDDote3cHL6lu0BdtQEPnJzChwKrmOeg4VDFCSRwNSuuSFniv5Rtv3OeKF2VI4jBD/7fAA32gF2RnY7OSLIML3AKJOyvWTd9kiSaxhL2ybBYRZEAgvGMA=
  • List-id: Xen developer discussion <xen-devel.lists.xensource.com>


On 9/12/07, Keir Fraser <Keir.Fraser@xxxxxxxxxxxx> wrote:
Xen does not have this general read-only restriction. It does force page tables to be read-only, otherwise a guest could grant itself access to arbitrary memory that it does not own.

Thank you for the answer.   In the first place, we will not know what is pagetable or non-pagetable memory.   For example, during dom0/domU initialisation, the guest OS will query the e820 bios mechanism for physical memory  availability, and the guest OS (paravirt or HVM) will then assign different parts of the physical memory for pagetable construction.   Then after all the pagetable is completely constructed, the CR3 is loaded, which started the hardware MMU operation.    So therefore, before the CR3 is loaded the entire physical memory is marked as readonly, and after the CR3 is loaded, only those memory not involved in pagetable mapping are unmarked readonly?

Does not seem right, as guest OS can change the CR3 anytime subsequently as well.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel

 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.