2 ms·
Based on my research, I would suggest seL4 microKernel running on ARM-64 hardware with Genode built variant of Linux. AFAIK seL4 is the only formally security
by GianFabien 2y ago
Based on my research, I would suggest seL4 microKernel running on ARM-64 hardware with Genode built variant of Linux.
AFAIK seL4 is the only formally security verified kernel for specific hardware. See their website for verification status of different hardware configurations.
The closest widely used system is Apple OSX which in turn was evolved from CMU Mach.
The critical aspect is keeping the smallest possible attack surface, which is why capability based message-passing microkernels are more resilient than monolithic kernels.
- wmf 2y agoOS X doesn't use that much from Mach and doesn't have particularly impressive security.
- deleted 2y ago[deleted]
- mikewarot 2y agoI came here to suggest Genode as well. Default deny goes a long way toward stopping trouble.
- nicecars 2y agoDoes running Linux on SEL4 only prevent attacks on the hardware or firmware level if Linux is compromised?