CPC G06F 21/53 (2013.01) [G06F 9/5016 (2013.01); G06F 12/00 (2013.01); G06F 21/121 (2013.01); G06F 21/74 (2013.01); G06F 2221/033 (2013.01); G06F 2221/0713 (2013.01); G06F 2221/2113 (2013.01)] | 20 Claims |
1. An apparatus comprising:
processor circuitry coupled to a memory, the processor circuitry to:
load, via software isolation manager circuitry, an unsandbox in a user privilege level of the processor;
load, via the unsandbox, a sandboxed application in the user privilege level;
store, via the unsandbox, an extended descriptor selector in a code segment register of the processor, wherein the extended descriptor selector references an extended descriptor of an extended descriptor table; and
execute the sandboxed application in response to enablement of an application sandbox mode of the processor, wherein the processor further comprises sandbox manager circuitry to enable the application sandbox mode in response to storage of the extended descriptor selector in the code segment register, and wherein to load the logical address comprises to load the logical address in response to execution of the sandboxed application.
|