From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=0.2 required=5.0 tests=BAYES_00,INVALID_MSGID,
	REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,1f0b49e8848e371d
X-Google-Attributes: gid103376,public
From: kilgallen@eisner.decus.org (Larry Kilgallen)
Subject: Re: Memory allocation
Date: 2000/03/06
Message-ID: <2000Mar6.072113.1@eisner>#1/1
X-Deja-AN: 593782831
References: <38BCD2B8.503B95FA@gmx.net> <89m3f4$msj$1@nnrp1.deja.com>
 <38c30e0f@eeyore.callnetuk.com>
X-Trace: news.decus.org 952345278 18151 KILGALLEN [216.44.122.34]
Organization: LJK Software
Reply-To: Kilgallen@eisner.decus.org.nospam
Newsgroups: comp.lang.ada
Date: 2000-03-06T00:00:00+00:00
List-Id: <comp.lang.ada>

In article <38c30e0f@eeyore.callnetuk.com>, "Nick Roberts" <nickroberts@callnetuk.com> writes:
> Some may find it interesting to note that a (truly) secure operating system
> cannot generally provide this specific functionality (how much free memory
> is left), in order to avoid a thing called a 'covert channel'.

Only if the memory pool being measured is shared between security
compartments.  In virtual memory operating systems it is fairly
common to allow individual processes to have access to excessive
amounts of "memory" that isn't really there.  Obviously timing
channels are possible through the behaviour of the paging system
if it was not designed to isolate compartments from each other
in this regard.

> What it can, and should, provide, however, is a way for a program to say
> 'reserve x amount of memory exclusively for me'. This needs to be
> accompanied by a way to say 'now unreserve it'. Can anybody tell me of an
> actual OS that does just this, please?

VMS lets you lock pages into memory with system service $LCKPAG
and release them with $ULKPAG.  That persists despite swapping
activity, which I suppose is what you mean by "exclusively for
me".  A lighter-weight call to $LKWSET will ensure that a page
is in physical memory whenever your process is swapped in.

Larry Kilgallen