Re: [PATCH 04/47] KVM: x86: Disallow hypercalls for guest callers in rings 0

2009-10-04 Thread Avi Kivity
On 09/30/2009 08:58 AM, Jan Lübbe wrote: Hi! On Wed, 2009-08-26 at 13:29 +0300, Avi Kivity wrote: From: Jan Kiszkajan.kis...@siemens.com So far unprivileged guest callers running in ring 3 can issue, e.g., MMU hypercalls. Normally, such callers cannot provide any hand-crafted MMU command

Re: [PATCH 04/47] KVM: x86: Disallow hypercalls for guest callers in rings 0

2009-09-30 Thread Jan Lübbe
Hi! On Wed, 2009-08-26 at 13:29 +0300, Avi Kivity wrote: From: Jan Kiszka jan.kis...@siemens.com So far unprivileged guest callers running in ring 3 can issue, e.g., MMU hypercalls. Normally, such callers cannot provide any hand-crafted MMU command structure as it has to be passed by its

[PATCH 04/47] KVM: x86: Disallow hypercalls for guest callers in rings 0

2009-08-26 Thread Avi Kivity
From: Jan Kiszka jan.kis...@siemens.com So far unprivileged guest callers running in ring 3 can issue, e.g., MMU hypercalls. Normally, such callers cannot provide any hand-crafted MMU command structure as it has to be passed by its physical address, but they can still crash the guest kernel by