Re:GNU/Hurd strikes back: How to use the legendary OS in a (...
by taeric on Monday August 07, 2023 @02:45PM
(#37038811)
Fair. I'm not a fan of apples to oranges comparisons without leaning into more of it. Especially not when the obvious driver for difference between two things is that one is old and has a ton of the code you are currently behind on writing.
I do question if process isolation isn't fundamentally hard. Separate processes for separate things entirely is not fundamentally hard. That, I agree. But, so much of what we do is integrated together. Is why early attempts to make it so that some programs can't see my whole hard drive are bonkers annoying. I specifically want access to the picture I just saved in that editing program so that I can email it.
Re:GNU/Hurd strikes back: How to use the legendary OS in a (...
by edgyquant on Monday August 07, 2023 @06:37PM
(#37041909)
>obvious driver for difference between two things is that one is old and has a ton of the code you are currently behind on writing.
In this case they’re both old though, as Hurd predates Linux by a year.
Re:GNU/Hurd strikes back: How to use the legendary OS in a (...
by taeric on Tuesday August 08, 2023 @12:09AM
(#37044425)
Fair, if amusing. Hurd "predates" Linux in name only. And, if anything, this would serve as a strong piece of evidence that microkernels have a hard time getting traction.
Re:GNU/Hurd strikes back: How to use the legendary OS in a (...
by CRConrad on Monday August 21, 2023 @02:23PM
(#37213395)
Which brings the debate back to the argument, doubtless made many many times over the years, that there is probably a reason that microkernels have a hard time getting traction.
Process isolation actually isn’t fundamentally hard…it’s just hard on a system that wasn’t designed for it. And SELinux doesn’t do what microkernels do. Even with a tightly locked down SELinux configuration, a driver vulnerability can lead to root access. SELinux can protect your userland the same way that microkernels do, but it can’t put your drivers in userland.