A sandbox mode for the kernel

Posted Mar 7, 2024 14:34 UTC (Thu) by tesarik (subscriber, #52705)
In reply to: A sandbox mode for the kernel by roc
Parent article: A sandbox mode for the kernel

Yes, SandBox Mode could be redefined as immutable user space. I did consider this option but then decided against it, because I wanted to make it reasonably easy to to move existing kernel code into a SandBox Mode. Making a user-mode driver (UMD) is substantially more effort:

UMD is a user-space application. It cannot use the standard kernel APIs.
Data passed between the kernel and UMD must be serialized and deserialized, plus you may have to add some glue code in the kernel.

That said, if such definition of SandBox Mode is more welcome by the community, it is a viable alternative.