EMULATING MODE-BASED EXECUTE CONTROL FOR MEMORY PAGES IN VIRTUALIZED COMPUTING SYSTEMS

    公开(公告)号:US20180173551A1

    公开(公告)日:2018-06-21

    申请号:US15383605

    申请日:2016-12-19

    Applicant: VMware, Inc.

    Abstract: An example method of emulating nested page table (NPT) mode-based execute control in a virtualized computing system includes: providing NPT mode-based execute control from a hypervisor to a virtual machine (VM) executing in the virtualized computing system; generating a plurality of shadow NPT hierarchies at the hypervisor based on an NPT mode-based execute policy obtained from the VM; configuring a processor of the virtualized computing system to exit from the VM to the hypervisor in response to an escalation from a user privilege level to a supervisor privilege level caused by guest code of the VM; and exposing a first shadow NPT hierarchy of the plurality of shadow NPT hierarchies to the processor in response to an exit from the VM to the hypervisor due to the escalation from the user privilege level to the supervisor privilege level.

Patent Agency Ranking