← Back to context

Comment by wosined

3 days ago

I might be wrong, but microkernel also need drivers, so the attack surface would be the same, or not?

You're not wrong, but monolithic kernel drivers run at a privilege level that's even higher than root (ring 0) while microkernels run them at userspace so they're as dangerous as running a normal program.

  • "Just think of the power of ring-0, muhahaha! Think of the speed and simplicity of ring-0-only and identity-mapping. It can change tasks in half a microsecond because it doesn't mess with page tables or privilege levels. Inter-process communication is effortless because every task can access every other task's memory.

    "It's fun having access to everything."

    — Terry A. Davis

    • > Inter-process communication is effortless because every task can access every other task's memory.

      I think this would get messy quick in an OS designed by more than one person