[RFC PATCH 2/7] x86/sci: add core implementation for system call isolation

Andy Lutomirski luto at kernel.org
Mon Apr 29 18:43:20 UTC 2019


On Mon, Apr 29, 2019 at 11:27 AM James Morris <jmorris at namei.org> wrote:
>
> On Sat, 27 Apr 2019, Ingo Molnar wrote:
>
> >  - A C language runtime that is a subset of current C syntax and
> >    semantics used in the kernel, and which doesn't allow access outside
> >    of existing objects and thus creates a strictly enforced separation
> >    between memory used for data, and memory used for code and control
> >    flow.
>
> Might be better to start with Rust.
>

I think that Rust would be the clear winner as measured by how fun it sounds :)



More information about the Linux-security-module-archive mailing list