WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: Fw: [Xen-devel] Xen on /. again

Mark Williamson wrote:

Well domains are not aware of each other's memory usage, so I wouldn't have thought that allocation / exposing real page tables would matter. (Except dom0 can of course see everything if it wants).

Microkernel people like to make the argument that you could create a low-bandwidth covert channel by systematically allocating and freeing a set of pages, and because domains see real page frame numbers they can learn the state of the other guy by looking at what pages they get in return from an alloc call. I suppose you could randomize the page-allocator, but then you will have to leave a certain amount of pages unused at all times, to have enough random pages to choose from.

(For myself, I would much rather have the real page tables and find a way to live with the covert channels, but I am not building military-grade systems).

Jacob


-------------------------------------------------------
This SF.Net email is sponsored by: IntelliVIEW -- Interactive Reporting
Tool for open source databases. Create drag-&-drop reports. Save time
by over 75%! Publish reports on the web. Export to DOC, XLS, RTF, etc.
Download a FREE copy at http://www.intelliview.com/go/osdn_nl
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel