From mboxrd@z Thu Jan 1 00:00:00 1970 From: Razvan Cojocaru Subject: Re: [PATCH V10 for-4.5 0/4] Basic guest memory introspection support Date: Thu, 18 Sep 2014 14:20:57 +0300 Message-ID: <541AC019.60100@bitdefender.com> References: <1411028666-21648-1-git-send-email-rcojocaru@bitdefender.com> <20140918110822.GC64996@deinos.phlegethon.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1XUZlN-0005xL-QH for xen-devel@lists.xenproject.org; Thu, 18 Sep 2014 11:20:37 +0000 Received: from smtp01.buh.bitdefender.com (smtp.bitdefender.biz [10.17.80.75]) by mx-sr.buh.bitdefender.com (Postfix) with ESMTP id 6A927800E9 for ; Thu, 18 Sep 2014 14:20:34 +0300 (EEST) In-Reply-To: <20140918110822.GC64996@deinos.phlegethon.org> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Tim Deegan Cc: kevin.tian@intel.com, keir@xen.org, ian.campbell@citrix.com, stefano.stabellini@eu.citrix.com, jun.nakajima@intel.com, ian.jackson@eu.citrix.com, eddie.dong@intel.com, jbeulich@suse.com, andrew.cooper3@citrix.com, xen-devel@lists.xenproject.org List-Id: xen-devel@lists.xenproject.org On 09/18/2014 02:08 PM, Tim Deegan wrote: > At 11:24 +0300 on 18 Sep (1411035862), Razvan Cojocaru wrote: >> We need to be able to detect rootkits in HVM guests, in a way that >> allows an application that runs in dom0 (or a similarly privileged >> domain) to control what the guest is allowed to do once a threat is >> detected. This has been done over the mem_event mechanism. >> >> Here is a summary of the series: >> >> a 1/4 xen: Emulate with no writes >> a 2/4 xen: Optimize introspection access to guest state >> A 3/4 xen, libxc: Force-enable relevant MSR events >> - 4/4 xen: Handle resumed instruction based on previous mem_event reply > > For the x86/mm and mem_event parts, > > Acked-by: Tim Deegan Thanks! Regards, Razvan Cojocaru