-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Labels
essentialBasic feature every modern OS should haveBasic feature every modern OS should havesecurityEnhances securityEnhances security
Description
Purpose: Ensures physical isolation and separation between user processes, thus adding a basic level of security
Implementation: Use the MMU and page tables as indirection to separate virtual per-process memory from physical, general-purpose storage. Additionally, create physically separated space for the system only accessible from EL1 and above.
Proof: Multiple user processes see different data at the same virtual adresses. Neither of them can access kernel space.
Bonus: Figure out how to distribute available physical memory to kernel and all user processes
Metadata
Metadata
Assignees
Labels
essentialBasic feature every modern OS should haveBasic feature every modern OS should havesecurityEnhances securityEnhances security