I don't know if we'll ever get back to the original vision of very fine-grained apps, with object-cap security baked into the language itself. It would be nice... that would provide another level of security beyond what any OS can provide.
Re:The KeyKOS Nanokernel Architecture (1992)
by NormH on Wednesday November 11, 2015 @03:38PM
(#10549105)
I wrote many of the Keykos papers and can answer most questions you might have.
For instance, can sandstorm do confinement as described at http://cap-lore.com/CapTheory/Confine/ ?
Re:The KeyKOS Nanokernel Architecture (1992)
by nickpsecurity on Sunday November 08, 2015 @10:18AM
(#10528686)
Excellent system that exemplified effective use of the capability model. Anyone aiming to learn or develop secure OS's should read on this plus look up the successor for x86, EROS by Shapiro. EROS had a secure kernel, persistance, robust network stack, and more secure GUI. Worth building on.
Note: Look up Coyotos kernel as they mention a few EROS attributes you might improve or change.
The way ahead, at least in the short term, seems to be containerized apps on top of Linux, as with Sandstorm:
https://sandstorm.io/
I don't know if we'll ever get back to the original vision of very fine-grained apps, with object-cap security baked into the language itself. It would be nice... that would provide another level of security beyond what any OS can provide.
Note: Look up Coyotos kernel as they mention a few EROS attributes you might improve or change.