Re:The Jury Is In: Monolithic OS Design Is Flawed [pdf]
by monocasa on Wednesday August 15, 2018 @04:19PM
(#17769391)
I wonder which L4 they use. L4 is more a family than a single kernel. The different variants are essentially totally different kernels from the same school of thought.
Re:The Jury Is In: Monolithic OS Design Is Flawed [pdf]
by namibj on Wednesday August 15, 2018 @05:38PM
(#17770011)
For that security I'd assume seL4, though I did not see anyone obviously apple on the devel mailing list...
Re:The Jury Is In: Monolithic OS Design Is Flawed [pdf]
by monocasa on Wednesday August 15, 2018 @05:59PM
(#17770140)
Looking into it more, it looks like a heavily modified fork of L4Ka::Pistachio. That's pretty fun, I may have to go exploit hunting this weekend.
https://www.blackhat.com/docs/us-16/materials/us-16-Mandt-De...
Re:The Jury Is In: Monolithic OS Design Is Flawed [pdf]
by bryanbuckley on Thursday August 16, 2018 @06:19AM
(#17773386)
Same for many Android phones and AMD chips with PSP (trustonic's l4 forked OS).
> The Secure Enclave runs an Apple-customized version of the L4 microkernel. This microkernel is signed by Apple, verified as part of the iOS secure boot chain, and updated through a personalized software update process.
https://www.apple.com/business/docs/iOS_Security_Guide.pdf