Method and apparatus for first operating system to access resource of second operating system

1. An apparatus comprising:

a first operating system has a first memory area and virtual memory address space comprising first address space and second address space; and

a second operating system has a kernel space and a kernel page table,

wherein a processor of the first operating system is configured to:

obtain register configuration information of the kernel page table and kernel symbol table information of the second operating system;

configure, based on the register configuration information, the first memory area corresponding to the second address space; and

access a resource in the kernel space using the second address space.

2. The apparatus of claim 1 , wherein the first operating system further comprises a dynamic integrity measurement module configured to provide a security service for the second operating system by accessing the resource of the second operating system.

3. The apparatus of claim 1 , wherein the first address space is a low-order address space, and wherein the second address space is a high-order address space.

4. The apparatus of claim 3 , wherein a first range of the high-order address space is consistent with a second range of a kernel address space of the second operating system.

5. The apparatus of claim 1 , wherein the register configuration information comprises configuration information of an address translation controller, configuration information of a memory attribute controller, and configuration information of a kernel space page table base address register.

6. A method implemented by a first operating system, comprising:

obtaining register configuration information of a kernel page table and kernel symbol table information of a second operating system, wherein the first operating system has virtual memory address space comprising first address space and second address space;

configuring, based on the register configuration information, a first memory area of the first operating system, wherein the first memory area corresponds to the second address space; and

accessing a resource in kernel space of the second operating system using the second address space.

7. The method of claim 6 , further comprising providing a dynamic integrity measurement module to provide a security service for the second operating system by accessing the resource of the second operating system.

8. An apparatus comprising:

a first operating system has a first kernel space, user space, a first address space, a second address space, and a register, wherein the register comprises a first memory area and a second memory area;

a second operating system has a first kernel page table and a second kernel space; and

a processor configured to:

configure the first kernel space and user space in the first address space, wherein the first address space corresponds to the first memory area;

control the first operating system to obtain kernel symbol table information of the second operating system and register configuration information of the first kernel page table;

configure the second address space with the register configuration information of the first kernel page table, wherein the second address space corresponds to the second memory area; and

control the first operating system to access a first resource in the second kernel space using the second address space.

9. The apparatus of claim 8 , wherein the first address space is low-order address space, wherein the second address space is high-order address space, and wherein a first range of the high-order address space is consistent with a second range of kernel address space of the second operating system.

10. The apparatus of claim 8 , wherein the processor is further configured to control the first operating system to parse the kernel symbol table information to obtain a conversion relationship of high-order address space of the second operating system, obtain user page table base address information of a user process, read user page table entry content level using the conversion relationship, and access a second resource in user space of the second operating system.

11. The apparatus of claim 8 , wherein the processor is further configured to:

store a second kernel page table and a user page table of the first operating system in a page table memory of the first address space; and

configure the page table memory to the first memory area.

12. The apparatus of claim 11 , wherein the processor is further configured to:

add user inaccessible permission control to the second kernel page table; and

add privileged execute never (PXN) protection to the user page table.

13. The apparatus of claim 8 , wherein the processor is further configured to reserve the second address space based on a high-order address space of the second operating system.

14. The apparatus of claim 8 , wherein the processor is further configured to control the first operating system to receive a request message from the second operating system, and wherein the request message carries the kernel symbol table information and the register configuration information of the first kernel page table.

15. The apparatus of claim 8 , wherein the first operating system comprises a client application (CA), and wherein the processor is further configured to modify, in a CA initialization process, a configuration of the register based on the register configuration information.

16. The apparatus of claim 8 , wherein the register configuration information comprises configuration information of an address translation controller, configuration information of a memory attribute controller, and configuration information of a kernel space page table base address register.

17. The apparatus of claim 8 , wherein the first operating system comprises a dynamic integrity measurement system configured to provide a security service for the second operating system.

18. The apparatus of claim 17 , wherein the processor is further configured to control the dynamic integrity measurement system to access the first resource.

19. The apparatus of claim 8 , wherein the processor is further configured to control the first operating system to send exception-related information to the second operating system when an exception occurs while the first operating system accesses the resource.

20. The apparatus of claim 19 , wherein the first operating system comprises a remote procedure call (RPC) service, and wherein the processor is further configured to control the RPC service to send the exception-related information to the second operating system.