IssueRaiser

Of course microkernel approach is more secure, if a driver gets p0wned, corrupts data structures, or plain keeps crashing, it doesn't tak...

Of course microkernel approach is more secure, if a driver gets p0wned, corrupts data structures, or plain keeps crashing, it doesn't take the whole kernel with it. Naturally the issue might be as bad that the whole stack can't recover from, but still much better than corrupting the kernel. One of the SecDevOps guidelines when hardening servers is that every process should have its own user, yes. Kmods and akmods run in kernel memory space and aren't ABI stable.

Posted by pjmlp on May 2, 2023, 7:01 AM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.2,500 issues0 comments

hackernews (EdTech)

Of course microkernel approach is more secure, if a driver gets p0wned, corrupts data structures, or plain keeps crashing, it doesn't tak...

pjmlpMay 2, 2023, 7:01 AM

Of course microkernel approach is more secure, if a driver gets p0wned, corrupts data structures, or plain keeps crashing, it doesn't take the whole kernel with it. Naturally the issue might be as bad that the whole stack can't recover from, but still much better than corrupting the kernel. One of the SecDevOps guidelines when hardening servers is that every process should have its own user, yes. Kmods and akmods run in kernel memory space and aren't ABI stable.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue