Comment by afiori
5 years ago
The point was to use compile-time checks instead of a MMU to separate kernel services.
The concept is interesting (if maybe untested) it allows to have explicit opt-in sharing while blocking accidental sharing
5 years ago
The point was to use compile-time checks instead of a MMU to separate kernel services.
The concept is interesting (if maybe untested) it allows to have explicit opt-in sharing while blocking accidental sharing
> The point was to use compile-time checks instead of a MMU to separate kernel services.
Rust's compile time checks cannot replace the MMU. There were experimental SAS (single address space) operating systems which didn't depend on the MMU for protection, but they used "managed" languages, i.e., all code was executed in a sandboxed JIT.