4 ms·
UNIX entire security model is "ambient security" in operating systems literature. Ambient security is a joke. Real security requires a capability-based model.
by snvzz 2y ago
UNIX entire security model is "ambient security" in operating systems literature.
Ambient security is a joke. Real security requires a capability-based model.
seL4[0] implements the mechanisms to do this efficiently. Lions OS implements an entire system with seL4 as core[1] leveraging these mechanisms.
0. https://sel4.systems/About/seL4-whitepaper.pdf https://sel4.systems/About/seL4-whitepaper.pdf
1. https://trustworthy.systems/projects/LionsOS/ https://trustworthy.systems/projects/LionsOS/
- anthk 2y agoCheck 9front and GNU/Hurd. Namespaces are good too.
- snvzz 2y ago>GNU/Hurd It will not go anywhere until they manage to move away from the gnu mach kernel. (as it hasn't happened yet, I am afraid it is quite unlikely to happen anymore)
- hollerith 2y agoFirst I've heard of LionsOS. It is mature enough to run a web server: https://sel4.systems/Info/Website/ https://sel4.systems/Info/Website/