[Xen-devel] Re: Xen Security meeting summary

["David Lie" <lie@xxxxxxxxxxxxxxxx>]

This was an interesting discussion.  I must be missing something though:

- page mapping visibility: several people said that they felt uncomfortable
with the global visibility of mappings from machine to physical address in a
guest as this provides a lot of information to an attacker.

How does letting an attacker know the physical to machine mappings benefit
an attacker?  I assume the attacker still would not have read/write access
to pages that do not belong to the compromised domain.  Is there a concrete
attack that people are aware of, or is this just a precautionary measure?

Thanks,

David Lie





-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/xen-devel