3 ms·
Kernel code is by design "insecure". You can bend over backwards to make it look secure (see the few Rust OS implementations that exist today), but at the end
by kramerger 4y ago
Kernel code is by design "insecure".
You can bend over backwards to make it look secure (see the few Rust OS implementations that exist today), but at the end of the day you can't combine "safe" languaues and real memory security as you are modifying page tables and programming DMA using raw addresses.
- woodruffw 4y agoBoth the OpenSSF and Linux Foundation work on things other than the kernel. (But even beyond that: Rust has an entire sublanguage ("unsafe Rust") that's intended for these purposes. The point of unsafe Rust is to do things that are safe but the compiler can't reason about, so that subsequent safe Rust can rely on abstractions built in unsafe code.)