摘要
基于Intel i386平台处理器和L inux 2.6内核源代码,从硬件内存保护和虚拟内存保护两个方面分析了最新的L inux内存保护机制,其中硬件内存保护机制包括段式映射阶段的访问控制、页式映射阶段的访问控制以及最新内存保护NX(No eXecute)技术,虚拟内存保护机制包括虚拟区间保护、虚拟区间加锁和Hole技术。最后进一步讨论了增强L inux内存保护的方案。
Based on Intel i386 Processor and Linux 2.6 kemel source code, the latest Linux memory protection mechanism is analyzed from two aspects of hardware memory protection and virtual memory protection. The hardware memory protection mechanism includes access controls in segment stage , access controls in paging mapping stage and a new memory protection technique NX (No eXecute). Virtual memory area protection includes virtual memory area protection, locking and Hole technique. Finally, the scheme of enhanced Linux memory protection is discussed.
出处
《航空计算技术》
2006年第3期56-59,共4页
Aeronautical Computing Technique
关键词
内存保护
地址映射
访问控制
虚拟内存
memory protection
address mapping
access control
virtual memory