3 ms·
Anything in a modern operating system other than the kernel can be considered to be running in a virtual machine The level of isolation between processes runni
by waitwhat 15y ago
Anything in a modern operating system other than the kernel can be considered to be running in a virtual machine
The level of isolation between processes running on the same machine doesn't really come close to that afforded to processes running inside different VMs.
- wmf 15y agoBut that's an OS design flaw, not an "immutable law". It doesn't apply to, say, EROS.
- ars 15y agoMaybe it doesn't, but it could. So the first law doesn't seem correct. As the simplest example a multi uses unix operating system allows lots of people to run programs on the same computer and barring errors it works fine in separating them.
- justincormack 15y agoSome resources are virtual, so yes it is a vm. Processes are one level, then there are bsd jails, linux containers, lots of vm types. All have different security issues, once processes seemed enough isolation. In the end the bugs matter most, and vm isolation has bugs too, they have just been harder to find and exploit. Security is not absolute, just a matter of degrees.