[Xen-devel] Hypercall by DomU Application

[Srujan Kotikela <ksrujandas@xxxxxxxxx>]

Hi,

I am working on a security architecture. In this architecture, the application in DomU has to communicate directly with the hypervisor. But as I can see, the xen architecture allows only DomU kernel to raise a hypercall. I am planning to enable application to communicate with xen directly. I am assuming, setting up a trap gate with Ring-3 access should do the trick. I have few questions regarding this.

Is my idea feasible? ==> (  _set_gate(idt_table+HYPERCALL_VECTOR, 15, 3, &hypercall); )

Are there any security/performance/functional implications with this approach?

Thanks and regards,

SDK.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel