[Xen-devel] read-only pagetable entries

[Srujan Kotikela <ksrujandas@xxxxxxxxx>]

Hi,

I am trying to mark certain page-table entries (pte) of a guest as read-only by the guest operating system (complete control by xen). If this pte is ever to be changed to READ/WRITE, it should be done by  a custom hypercall (called only by a special process). The guest os's request to mark this pte READ/WRITE should be denied/ignored by xen. 

The approach I am planning is, obtain the (guest) virtual address from the process and pass to xen through hypercall, obtain cr3 from the vcpu, compute PDE (page directory entry), obtain PT (Page Table) base address, compute PTE's (guest) physical address. Then translate PFN to MFN and update the entries to READ-ONLY. 

However, I feel this process is not sufficient to restrict the OS from changing it. So I would like to know your suggestions/changes in my approach.

--
Srujan D. Kotikela

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel