Mondrix: memory isolation for linux using mondriaan memory protection

This paper presents the design and an evaluation of Mondrix, a version of the Linux kernel with Mondriaan Memory Protection (MMP). MMP is a combination of hardware and software that provides efficient fine-grained memory protection between multiple protection domains sharing a linear address space. Mondrix uses MMP to enforce isolation between kernel modules which helps detect bugs, limits their damage, and improves kernel robustness and maintainability. During development, MMP exposed two kernel bugs in common, heavily-tested code, and during fault injection experiments, it prevented three of five file system corruptions. The Mondrix implementation demonstrates how MMP can bring memory isolation to modules that already exist in a large software application. It shows the benefit of isolation for robustness and error detection and prevention, while validating previous claims that ection abstractions MMP offers are a good fit for software. This paper describes the design of the me...

• Type: Conference
• Year: 2005
• Where: SOSP
• Authors: Emmett Witchel, Junghwan Rhee, Krste Asanovic
• Keywords: Kernel Robustness, MMP Data, Mondrix Uses Mmp, Operating System, SOSP 2005