Skip to main content

Table 2 Some of the privileged instructions

From: Iso-UniK: lightweight multi-process unikernel through memory protection keys

Privileged InstructionsInfluences
wrpkruModify PKRU for A/W permissions
mov %REG, %CR0Modify flags such as WP or PG
mov %REG, %CR3Modify the base of page table
mov %REG, %CR4Modify flags like PKE
sidtModify interrupt descriptor handler
wrmsrModify model specific bit like NX
  1. And it is easy to configure other instructions. Except wepkru is used by MPK Gate, other instructions should be protected by the Privilege Gate and unmapped in most of the time