3 ms·
The only real difference seems to be in the kernel. And that one difference is that it's "capability-based", which in practice means that programs are given key
by phendrenad2 3y ago
The only real difference seems to be in the kernel. And that one difference is that it's "capability-based", which in practice means that programs are given keys by the kernel, which they can use later to make syscalls. This theoretically makes security easier to reason about.
- cududa 3y agoThere are tons of other differences and I'm not going to bother to list them all out here, but this is just not accurate.
- eviks 3y agoCould you bother linking to a place listing them all out there?
- xwowsersx 3y agoHow is this comment helpful if you won't list the differences or explain why it's not accurate?
- LargeTomato 3y agoI find it helpful. "Warning: don't trust this"
- deleted 3y ago[deleted]
- johncolanduoni 3y agoI think this is missing the forest for the trees: most of what would normally be a systemcall to the kernel in Linux is instead a capability-based IPC to other userspace processes with limited privilege. This includes device drivers, the networking stack, filesystems, etc.