vproc memory monitoring

[Simon 'corecode' Schubert]

Pablo Graubner wrote:
Hi folks,

I am working on additional security mechanisms for the dragonfly vkernel 
and I want to monitor all in-memory copies (like intel asm "mov" and its 
derivates) of a running vproc in order to check if the vproc is allowed 
to copy data to the resp. memory segment.
You would have to single-step every instruction.  In this case I guess you can even emulate the CPU and be faster.

Now if you have a way to check whether a process is allowed to perform a certain memory operation, then can't you simply use the page table and let the CPU do the checking job?

cheers
 simon