4 ms·

Could someone give a short explanation? I browsed through home page but I couldn't get a good picture of what it is. Is it a new OS, without using the Linux k

Could someone give a short explanation? I browsed through home page but I couldn't get a good picture of what it is. Is it a new OS, without using the Linux kernel but still using GNU tools (I saw a lot of references to GCC, GNU binutils, etc.).

pjmlp 7y ago
It is a new research OS using micro-kernel design, built in a mix of C++ and Ada, with a pluggable layers. It also has a POSIX compatibility layer, hence the references you saw. The best way is to browse through https://genode.org/documentation/genode-foundations/19.05/index.html https://genode.org/documentation/genode-foundations/19.05/in...
- zerr 7y ago
  Interesting why they couldn't go with 100% Ada - because of technical limitations or they just wanted to reach more people...
  - PyroLagus 7y ago
    It seems that Ada just relatively recently entered their field of vision.
mycall 7y ago
Best described here: https://genode.org/documentation/genode-foundations/19.05/introduction/Operating-system_framework.html https://genode.org/documentation/genode-foundations/19.05/in...
nickpsecurity 7y ago
Most projects depend on complex, vulnerable OS's like Linux that nobody knows how to secure. High-assurance security prefers minimalist foundations designed for security. Then, those foundations are leveraged by user-facing layers to inherit their properties. It's usually isolation of compromises to specific parts of memory with some support for blocking side channels between partitions. Genode follows that approach using an architecture similar to Nizza and Perseus: https://os.inf.tu-dresden.de/papers_ps/nizza.pdf https://os.inf.tu-dresden.de/papers_ps/nizza.pdf http://www.perseus-os.org/content/pages/Architecture.htm http://www.perseus-os.org/content/pages/Architecture.htm The NOVA microhypervisor, if compared to popular VMM's, is also illustrative of how high-assurance security applies minimalist, privilege-reducing design to the problem: http://hypervisor.org/eurosys2010.pdf http://hypervisor.org/eurosys2010.pdf Although I don't know Genode's assurances, most of the field also tries to make the assurance (confidence level) of the system as high as possible by using techniques that prove it has certain properties and/or rid it of as many vulnerabilities as possible. I have a list of historical and current methods here: https://pastebin.com/uyNfvqcp https://pastebin.com/uyNfvqcp

pjmlp 7y ago

It is a new research OS using micro-kernel design, built in a mix of C++ and Ada, with a pluggable layers. It also has a POSIX compatibility layer, hence the references you saw. The best way is to browse through https://genode.org/documentation/genode-foundations/19.05/index.html https://genode.org/documentation/genode-foundations/19.05/in...

zerr 7y ago
Interesting why they couldn't go with 100% Ada - because of technical limitations or they just wanted to reach more people...
- PyroLagus 7y ago
  It seems that Ada just relatively recently entered their field of vision.

mycall 7y ago

Best described here: https://genode.org/documentation/genode-foundations/19.05/introduction/Operating-system_framework.html https://genode.org/documentation/genode-foundations/19.05/in...

nickpsecurity 7y ago

Most projects depend on complex, vulnerable OS's like Linux that nobody knows how to secure. High-assurance security prefers minimalist foundations designed for security. Then, those foundations are leveraged by user-facing layers to inherit their properties. It's usually isolation of compromises to specific parts of memory with some support for blocking side channels between partitions. Genode follows that approach using an architecture similar to Nizza and Perseus: https://os.inf.tu-dresden.de/papers_ps/nizza.pdf https://os.inf.tu-dresden.de/papers_ps/nizza.pdf http://www.perseus-os.org/content/pages/Architecture.htm http://www.perseus-os.org/content/pages/Architecture.htm The NOVA microhypervisor, if compared to popular VMM's, is also illustrative of how high-assurance security applies minimalist, privilege-reducing design to the problem: http://hypervisor.org/eurosys2010.pdf http://hypervisor.org/eurosys2010.pdf Although I don't know Genode's assurances, most of the field also tries to make the assurance (confidence level) of the system as high as possible by using techniques that prove it has certain properties and/or rid it of as many vulnerabilities as possible. I have a list of historical and current methods here: https://pastebin.com/uyNfvqcp https://pastebin.com/uyNfvqcp