[Xen-devel] help--Does Xen allow us to grant all the machine memory access authority to another domain rather than Dom0 ?

["lelema.cn" <lelema.cn@xxxxxxxxx>]

Hello all,

I want to build an isolated domain (noted as 'Newdomain' below) to collect information of the whole machine memory used by all the VMs, including dom0.

So I need to grant the privilege of reading all the machine memory to 'Newdomain'. 

Below are my questions and some immature ideas that needs your help to evaluate them:

0, Is it possible to do this ?

1, Could I grant the privilege to 'Newdomain' at boot time by firstly writing another function similar to construct_domain0() defined in /xen/arch/x86/domain_build.c, then booting 'Newdomain' and dom0 at the boot stage?

2, Or, could I grant the privilege to Newdomain by writing a specified domain loader that are similar to the loader for the domU guest, but grant the whole memory access?

3, Does anyone have any ideas about this?

Thank you in advance!

Lele MA

Aug. 4th, 2014

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel