Is that possible to virtualize a kernel module?

Is that possible to virtualize a kernel module?

[吴锐]

Hi,

I am currently do a project to detect malicious module. And I want to
use KVM, namely, using virtualization to achieve this?
Is that possible to virtualize a kernel module without a virtualized Linux?
For example, if I only want to virtualize a network device, the
network device still runs inside the kernel memory address space
without changing anything else.
The only difference is that the network device will run on VMX
non-root mode, while the kernel still run on VMX root mode.

Rui

Re: Is that possible to virtualize a kernel module?

[Avi Kivity]

On 12/27/2011 11:58 AM, 吴锐 wrote:
> Hi,
>
> I am currently do a project to detect malicious module. And I want to
> use KVM, namely, using virtualization to achieve this?
> Is that possible to virtualize a kernel module without a virtualized Linux?
> For example, if I only want to virtualize a network device, the
> network device still runs inside the kernel memory address space
> without changing anything else.
> The only difference is that the network device will run on VMX
> non-root mode, while the kernel still run on VMX root mode.
>

What would be the point?  the "virtualized" module can corrupt the
non-virtualized kernel's memory.

It may be technically possible (using vmx, but not kvm), but it's a lot
of work.


-- 
error compiling committee.c: too many arguments to function

Re: Is that possible to virtualize a kernel module?

[Zhen-Hua Li]

Do you mean that you want to run a kernel in another VM?   I think it
is not possible.

I have checked it. In a qemu with kvm enabled,

# cat /proc/cpuinfo | grep ^flags
flags           : fpu de pse tsc msr pae mce cx8 apic sep pge cmov mmx
fxsr sse sse2 up pni popcnt hypervisor

It does not have "VMX" in flags. That means the vm does not have vt support.


On Tue, Dec 27, 2011 at 6:02 PM, Avi Kivity <avi@redhat.com> wrote:
> On 12/27/2011 11:58 AM, 吴锐 wrote:
>> Hi,
>>
>> I am currently do a project to detect malicious module. And I want to
>> use KVM, namely, using virtualization to achieve this?
>> Is that possible to virtualize a kernel module without a virtualized Linux?
>> For example, if I only want to virtualize a network device, the
>> network device still runs inside the kernel memory address space
>> without changing anything else.
>> The only difference is that the network device will run on VMX
>> non-root mode, while the kernel still run on VMX root mode.
>>
>
> What would be the point?  the "virtualized" module can corrupt the
> non-virtualized kernel's memory.
>
> It may be technically possible (using vmx, but not kvm), but it's a lot
> of work.
>
>
> --
> error compiling committee.c: too many arguments to function
>
> --
> To unsubscribe from this list: send the line "unsubscribe kvm" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html