Program interruptions for page importing/exporting

A system comprising:

• a memory comprising computer readable instructions;
• and
• a processing device for executing the computer readable instructions for performing a method comprising:
• presenting, by a hardware control of a computing system, an exception to an untrusted entity when the untrusted entity accesses a secure page stored in a memory of the computing system, the exception preventing the untrusted entity from accessing the secure page, wherein the zone-security table comprises a secure domain identifier, a secure interface control bit, a disable address compare bit, a shared bit, and a host virtual address;
• in response to the exception, issuing, by the untrusted entity, an export call routine, wherein the export call routine comprises registering, by a secure interface control of the computing system, the secure page to the secure interface control in a zone-security table thereby preventing a secure guest from accessing the secure page;
• and
• executing, by the secure interface control of the computing system, the export call routine.

A computer program product comprising:

• a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processing device to cause the processing device to perform a method comprising:
• presenting, by a hardware control of a computing system, an exception to an untrusted entity when the untrusted entity accesses a secure page stored in a memory of the computing system, the exception preventing the untrusted entity from accessing the secure page;
• in response to the exception, issuing, by the untrusted entity, an export call routine, wherein the export call routine comprises registering, by a secure interface control of the computing system, the secure page to the secure interface control in a zone-security table thereby preventing a secure guest from accessing the secure page, wherein the zone-security table comprises a secure domain identifier, a secure interface control bit, a disable address compare bit, a shared bit, and a host virtual address;
• and
• executing, by the secure interface control of the computing system, the export call routine.

A computer-implemented method comprising:

• responsive to a secure entity accessing a page that has been paged-in by a untrusted entity of a computing system but is not yet secure, presenting, by a hardware control of the computing system, an exception to the untrusted entity of the computing system, the exception preventing the untrusted entity from accessing the page;
• and
• responsive to the exception, issuing, by the untrusted entity, an import call routine;
• and
• executing, by a secure interface control of the computing system, the import call routine.

A computer program product comprising:

• a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a processing device to cause the processing device to perform a method comprising:
• responsive to a secure entity accessing a page that has been paged-in by a untrusted entity of a computing system but is not yet secure, presenting, by a hardware control of the computing system, an exception to the untrusted entity of the computing system, the exception preventing the untrusted entity from accessing the page;
• and
• responsive to the exception, issuing, by the untrusted entity, an import call routine;
• and
• executing, by a secure interface control of the computing system, the import call routine.