4 ms·
You can run your Fil–C userland on provably–secure seL4. (Left as an exercise for the reader)
by avadodin 3mo ago
You can run your Fil–C userland on provably–secure seL4.
(Left as an exercise for the reader)
- josephg 3mo agoIf you’re using SeL4, userland processes are already strictly sandboxed. There’s still some benefit to Fil-C, since the added memory safety would make it much more difficult to take over a process. But the blast radius of a compromised program in SeL4 is much smaller because of the capability model.