Re:SeL4 Whitepaper [pdf]
by microkerneldude on Monday December 28, 2020 @06:11PM
(#25564424)
In terms of security, the answer is a clear yes. Xen is kernel of 100+kSLOC of unverified code, while seL4 is verified. On top of that, Xen has Dom0 and thus a complete Linux system in its TCB.
What Xen has over seL4 is the management/admin framework.
But there is a project to port Qubes to seL4, waiting for the funding to be cleared.
[ Parent
| on HN ]
Oh, cool. Thanks!
Can't help thinking, though, that we will still need something for administration. NixOS would seem a better choice than Fedora 18 (or whatever Qubes is on) for that.
I am also watching Spectrum with interest.