5 ms·
Doesn't that mean that your process is then responsible for ensuring that an app with a read-only capability cannot do a write ? You're moving the burden of en
by daymanstep 4mo ago
Doesn't that mean that your process is then responsible for ensuring that an app with a read-only capability cannot do a write ?
You're moving the burden of enforcement from the kernel to the user level ?
- deleted 4mo ago[deleted]
- josephg 4mo agoYes, microkernels like SeL4 do almost all real work out of the kernel, and in userland processes. It’s much more secure that way.