3 ms·
Plus, better isolation between driver code and other kernel code (which Fuchsia seems to bring; correct me if I'm wrong) would be good for everyone, since you c
by snazz 6y ago
Plus, better isolation between driver code and other kernel code (which Fuchsia seems to bring; correct me if I'm wrong) would be good for everyone, since you can be relatively assured that running vendor-provided driver blobs is safe.
- zozbot234 6y ago"Isolation" of driver code that can talk to on-SoC hardware is just not very meaningful. You can only have real driver isolation if it's enforced on the hardware side via some IOMMU mechanism (or by keeping the hardware isolated on the USB bus, etc.), otherwise you're just adding pointless overhead for no real benefit.
- goodthenandnow 6y agoHere you go: https://blog.quarkslab.com/playing-around-with-the-fuchsia-operating-system.html#process-isolation https://blog.quarkslab.com/playing-around-with-the-fuchsia-o...
- entha_saava 6y agoI didn't get it. Don't we want, for example, wifi driver not to be able to access and corrupt (due to some bug) GPU driver's memory?
- michaelmrose 6y agoDoes this actually happen?
- gigatexal 6y agoI’m sure it does when used to exploit devices.
- exged 6y agoIt's desirable, but typically hardware devices have DMA-capable buses that can read / write to arbitrary physical memory. So a buggy or malicious WiFi driver may be able to use the WiFi DMA hardware to write into the GPU driver's memory, and no pure software mechanism can stop it from doing so. IOMMUs solve this problem by giving hardware devices their own virtual address spaces.