Title

The VMM must maintain a separate execution domain for each executing process. (Cat II impact)

Discussion

VMMs can maintain separate execution domains for each executing process by assigning each process a separate address space. Each VMM process has a distinct address space so that communication between processes is performed in a manner controlled through the security functions, and one process cannot modify the executing code of another process. Maintaining separate execution domains for executing processes can be achieved, for example, by implementing separate address spaces. This capability is available in most commercial VMMs that employ multistate processor technologies.

Check Content

Verify the VMM maintains a separate execution domain for each executing process. If it does not, this is a finding.

Fix Text

Configure the VMM to maintain a separate execution domain for each executing process.

Additional Identifiers

Rule ID: SV-207496r958878_rule

Vulnerability ID: V-207496

Group Title: SRG-OS-000408

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.