Trusted file indirection

A server device comprising:

• a processor;
• and
• memory storing computer readable instructions that, when executed by the processor, configure the device to include:
• a hypervisor for managing execution of a plurality of virtual machine (VM) instances, said managing including allocating a different portion of memory to each instance;
• a first VM instance executing on the hypervisor, said first VM instance being a trusted server domain for administration of the server device, said first VM instance allocated a first region of memory;
• a second VM instance executing on the hypervisor, said second VM instance being an untrusted domain associated with a customer user of the server device, said second VM instance allocated a second region of memory;
• shared data stored in the first region of memory allocated to the first VM instance and designated as accessible by the second VM instance, wherein said shared data originates from the first VM instance;
• and
• a proxy driver executing within the second VM instance, said proxy driver configured to:
• intercept file system calls within the second VM instance;
• and
• when an intercepted file system call is associated with the shared data, proxying the file system call to the first VM instance for execution.

A method of transferring data, comprising:

• receiving, by a guest domain executing on a hypervisor, an indication that modified shared data is available, wherein said modified shared data is modified outside the control of the guest domain;
• intercepting, by a proxy driver executing in the guest domain, a file system call associated with the modified shared data;
• sending, by the proxy driver, the file system call associated with the modified shared data to the trusted domain;
• executing, by the trusted domain, the file system call associated with the modified shared data;
• and
• returning, from the trusted domain to the guest domain, information based on executing the file system call associated with the modified shared data.