One year of postmarketOS

Posted Jun 12, 2018 0:29 UTC (Tue) by khim (subscriber, #9252)
In reply to: One year of postmarketOS by marcH
Parent article: One year of postmarketOS

That problem is "easy" to solve: make kernel patches as small as possible, put all the logic in binary userspacs blobs.

That's what they were doing anyway AND actually sensible thing to do from security standpoint... The only people who lose are FOSS guys, but nobody thinks about them.

One year of postmarketOS

Posted Jun 14, 2018 1:10 UTC (Thu) by lsl (subscriber, #86508) [Link]

> That problem is "easy" to solve: make kernel patches as small as possible, put all the logic in binary userspacs blobs.

You forgot the part where the purpose of those small kernel patches is to just export unrestricted control over some device to these huge userspace blobs, preferably in the form of a world-accesible device file (though the latter seems to have gone out of fashion lately).

Not sure about these security gains.