| |||||||||||||
ELCE11: Sandboxing for automotive LinuxELCE11: Sandboxing for automotive LinuxPosted Nov 3, 2011 16:23 UTC (Thu) by Cyberax (✭ supporter ✭, #52523)In reply to: ELCE11: Sandboxing for automotive Linux by simlo Parent article: ELCE11: Sandboxing for automotive Linux
I don't trust OS-level sandboxes to contain malicious processes. System-level sandboxes (KVM, Xen) just might be able to do it but even that is doubtful.
That's why I'd just separate critical functionality into a completely separate CPU, maybe even with a separate network.
(Log in to post comments)
|
|||||||||||||