Patent ID: 9697027
Date: 2017-07-04
CPC Classifications: G06F

Claim:
1. A virtualization method comprising: intercepting a plurality of hypercalls for a host virtual machine and a plurality of guest virtual machines to a hypervisor, the intercepting being performed by a hypercall access control layer that is separate from the host virtual machine, and the plurality of guest virtual machines, that is included at least partially within the hypervisor, and that provides access control between the host virtual machine, the plurality of guest virtual machines and the hypervisor, routing a respective one of the hypercalls comprising the software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor for execution on a hardware platform, responsive to the respective one of the hypercalls comprising the software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor passing the hypercall access rules, wherein the hypervisor includes a respective hypercall table that maps hypercalls comprising the software trap from the host virtual machine and/or one of the plurality of guest virtual machines to the hypervisor for a respective host virtual machine and guest virtual machine to hypercall handlers and wherein the intercepting comprises: initiating reloading the respective hypercall table in the hypervisor by the hypercall access control layer, to identify one of the hypercall access control handlers as the hypereall handier for the respective host virtual machine and guest virtual machine, wherein the respective hypercall table is separate from respective system call tables contained within the respective host virtual machine and guest virtual machines.