3 ms·
> don't need as much virtual memory protection because that's handled by the language. This is true at compile time. But what does it do for you at runtime whe
by bluejekyll 10y ago
> don't need as much virtual memory protection because that's handled by the language.
This is true at compile time. But what does it do for you at runtime when bad actors will be trying to break any and all assumptions? The guarantees in the kernel need to be vigilant against attackers, so while the kernel itself might be simpler, the boundary with processes still needs a lot of constraints at runtime.
- krzat 10y agoI think the assumption here is that OS would only allow binaries built from safe rust code.
- bluejekyll 10y agoSure, but I don't know how you'd still guard against runtime issues. I'm not even sure you could require user space only safe code.