AFAIK, This is only applies to virtualization context. I think Xen uses this, if i am not wrong.
I thought Gaurav was asking about "traditional" ring zero.
Regards,
Tharindu
On 7/6/06, Greg Freemyer <greg.freemyer@xxxxxxxxx> wrote:
On 7/6/06, Tharindu Rukshan Bamunuarachchi <tharindub@xxxxxxxxx > wrote:
>
> Hi All,
>
> You better ask this as,
>
> What process can not do in ring 0???
>
> Process can do anything, like God.
>
>
>
> You can refer Intel's IA-32 architecutre manuals to get more info about
> this.
>
> http://www.intel.com/design/pentiumii/manuals/243190.htm
>
>
> Tharindu
Tharindu,
Your 6 months out of date.
AIUI, Ring 0 now has 2 sub-modes. The fully priveledged mode you
imply is used for tradional operating systems and for the host os in a
virtual machine (vm) setup.
The new restricted ring 0 sub-mode is designed for guest os'es in a vm setup.
--
Greg Freemyer
The Norcross Group
Forensics for the 21st Century
