Pablo Graubner wrote:
> Hi folks,
>
> I am working on additional security mechanisms for the dragonfly vkernel
> and I want to monitor all in-memory copies (like intel asm "mov" and its
> derivates) of a running vproc in order to check if the vproc is allowed
> to copy data to the resp. memory segment.
You would have to single-step every instruction. In this case I guess you can even emulate the CPU and be faster.
Now if you have a way to check whether a process is allowed to perform a certain memory operation, then can't you simply use the page table and let the CPU do the checking job?
cheers
simon