Re: [Xen-devel] create shadow pages

[ding baozeng <baozengding@xxxxxxxxx>]

Hi,

2010/11/4 Tim Deegan <Tim.Deegan@xxxxxxxxxx>

Hi,

At 12:30 +0000 on 04 Nov (1288873804), ding baozeng wrote:
> I alloc some memory (some pages)in the hvm domU kernel space, but not
> map it. So the kernel space could not access the memory by its guest
> tables. But I would access it by shadow pages for some use.

Why can't you just map it with the guest pagetables?  Having it only in
the shadow pagetables would be confusing.  What if the guest kernel
wants to map something else at that virtual address?

I want to create another address space for security analysis. In this address space, we could access all the kernel address space, but the kernel address space could not access some memory of it. So this address space need to create its own shadow pages. In the shadow pages, they contain all the mapping that kernel shadow pages have, and also contains some mapping for the memory that the kernel could not access. The shadow pages are always in memory. So there would be  two shadows, one for kernel, one for this address space. First, I want to copy the kernel shadow pages and then make some change to create the shadow pages we need.  As we know, the kernel shadow pages is built dynamically, then how to copy it and make it in memory always?

Best Regards,

                                                 Baozeng Ding

> When the
> shadow pages are built, they should be in memory always and should not
> be paged out.  Then how to create the shadow pages for the memory?

The easiest thing would be to change guest_walk_tables to insert your
mappings as if they were in the guest pagetables.  That way all the
users in Xen will be consisitent.

Cheers,

Tim.

--
Tim Deegan <Tim.Deegan@xxxxxxxxxx>
Principal Software Engineer, Xen Platform Team
Citrix Systems UK Ltd.  (Company #02937203, SL9 0BG)

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel