Re:Fuchsia Workstation
by codedokode on Monday March 28, 2022 @09:43AM
(#30830404)
> Single address space OS's in a broader sense have been made unviable by Spectre vulnerabilities;
This is valid only for current CPUs and probably can be fixed. For example, current CPUs do not do speculative accesses for memory-mapped IO, and it means that similar method could be used to prevent access to kernel or other processes memory. There could be registers that contain lower and upper bounds of accessible memory, and they could be checked before accessing it.
Re:Fuchsia Workstation
by native_samples on Tuesday March 29, 2022 @05:27AM
(#30840494)
MPKs fix that. They can be switched more or less instantly because they don't require a TLB flush, and (recent) Intel CPUs don't speculate through MPK boundary violations.
Single address space OS's in a broader sense have been made unviable by Spectre vulnerabilities; these days you need an address space flush at every transition from a "more private" to a "less private" information domain, which is basically every context switch when applications can't trust one another and have mutually private information that they're trying not to disclose to other apps.