kvm
kvm copied to clipboard
KVM-VMI
Fork of KVM with Virtual Machine Introspection patches
I'm trying to understand how you set up page protection in the guest, so that you can exit on PFs. (E.g., you use this mechanism to track system calls.) I...
I tried to setup the vagrant on an AMD processor, and the self-tests fails: ~~~ TASK [run kvm self-tests] ****************************************************** fatal: [kvmi]: FAILED! => changed=true cmd: - ./tools/testing/selftests/kvm/x86_64/kvmi_test delta: '0:00:00.607688'...
Hi guys, Can you explain what is the difference between these branches? I want to update my application which was written two years ago. Which branch should I work on?...
Hello, Is that x86_emulate_instruction can emulate all instructions? I want to emulate some call instruction,but I don't know how to do it,Do you have any information about this problem,Thanks.
Hi, I would like to print the available information in the KVMi handshake callback: ~~~C static int cb_handshake( const struct kvmi_qemu2introspector *qemu, struct kvmi_introspector2qemu *intro, void *ctx) { (void)ctx; if...
Hello,I do some tests on "sub-page-protection" but when I called "KVM_INIT_SPP" the function return error "-KVM_EOPNOTSUPP " So I don 't know is there need hardware support or need to...
In the KVMi-v6 API, the ability to emulate new data or new instructions is tied to the reply of a memory event: https://github.com/KVM-VMI/kvm/blob/5205f803008a2ee5788ba0a9cc7a475a546889ba/include/uapi/linux/kvmi.h#L251 ~~~C struct kvmi_event_pf_reply { __u64 ctx_addr; __u32...
While implementing [`VMI_EVENT_RESPONSE_SET_REGISTERS`](https://github.com/libvmi/libvmi/blob/master/libvmi/events.h#L437) in Libvmi KVM driver, I realized that it wasn't possible to `set` special registers and MSRs. The API provided by `kvmi-v6` allows to get these registers: https://github.com/KVM-VMI/kvm/blob/5205f803008a2ee5788ba0a9cc7a475a546889ba/tools/kvm/kvmi/include/kvmi/libkvmi.h#L110...
Is there any way to know which guest physical memory addresses are valid for KVMI_READ_PHYSICAL and KVMI_WRITE_PHYSICAL? As far as I can see, KVMI_GET_MAX_GFN gives the largest physical memory address...
Hi,I'm interested in introspected VM, I find that you make "kvm_slot_page_track_add_page" to set one slot of write_protect.But I can't find what new processes have you added in "handle_ept_violation" if this...