Information on implementing L4

[Andrew Warkentin]

On Fri, Sep 14, 2018, 7:22 PM John <john.r.moser at gmail.com> wrote:

>
>
> It doesn't have to run at Ring-0 you know.  Think about if you loaded a
> malicious network card driver into L4.
>

No L4 kernel I'm aware of has any facility for loading drivers into the
kernel. Drivers on L4 OSes are either regular processes that are allowed
limited hardware access ore are libraries loaded into such processes. From
what it sounds like, you are wanting to run all privileged services in the
same address space and hardware privilege level, relying solely on the CLR
to enforce protection domains, which would be less secure than a formally
verified microkernel using hardware protection.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://os.inf.tu-dresden.de/pipermail/l4-hackers/attachments/20180914/808ebc28/attachment.htm>