Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

You can run your Fil–C userland on provably–secure seL4.

(Left as an exercise for the reader)



If you’re using SeL4, userland processes are already strictly sandboxed. There’s still some benefit to Fil-C, since the added memory safety would make it much more difficult to take over a process. But the blast radius of a compromised program in SeL4 is much smaller because of the capability model.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: