2 ms·
Something something microkernels + capability-based security.
by onjectic 5mo ago
Something something microkernels + capability-based security.
- mattstir 5mo agoI've seen microkernels mentioned a few times between these LPE posts and I'm curious about why. Would they be fundamentally more secure against forgetting to add bounds checking, or assuming user-provided input buffers should be writable without checking?
- Gigachad 5mo agoYes, because as a userspace program if you forget to do bounds checking or read the wrong thing, the kernel kills the process. But if the buggy code is the kernel then there’s no protection. Microkernels aim to have as little code as required in kernel space.