Writing an OS in Rust: Handling Exceptions

Re:Writing an OS in Rust: Handling Exceptions by bluejekyll on Sunday March 26, 2017 @06:31PM (#13963730)

> don't need as much virtual memory protection because that's handled by the language.

This is true at compile time. But what does it do for you at runtime when bad actors will be trying to break any and all assumptions? The guarantees in the kernel need to be vigilant against attackers, so while the kernel itself might be simpler, the boundary with processes still needs a lot of constraints at runtime.

[ Parent | on HN ]

Re:Writing an OS in Rust: Handling Exceptions by krzat on Monday March 27, 2017 @05:37AM (#13966230)

I think the assumption here is that OS would only allow binaries built from safe rust code.

[ Parent | on HN ]

Re:Writing an OS in Rust: Handling Exceptions by bluejekyll on Monday March 27, 2017 @11:18AM (#13968399)

Sure, but I don't know how you'd still guard against runtime issues. I'm not even sure you could require user space only safe code.

[ Parent | on HN ]