For many years the practical attack surface of desktop computers has been shaped by doing work in the kernel better left on a different, less-privileged plane (

For many years the practical attack surface of desktop computers has been shaped by doing work in the kernel better left on a different, less-privileged plane (userland.) Some systems have chosen a different path and draw the line elsewhere.