SELinux - a call for end-of-life.

[Matthew Miller]

On Sat, Sep 04, 2010 at 12:04:41PM +0000, JB wrote:
> - a new Linux micro kernel 
>   It will address a different architecture of kernel, system, and user spaces.
>   There is a lot of know-how, theoretical and empirical research, and
>   experience in this area available.
>   The Linux community (professional and amateur) went thru trenches and is
>   experienced as well.

>From <http://lwn.net/Articles/403022/> (free content in a few weeks):


   At this point, a member of the audience asked about microkernel
   architectures. Linus responded that this question has long since been
   answered by reality: microkernels don't work. That architecture was seen
   as an easy way to compartmentalize problems; Linus, too, originally
   thought that it was a better way to go. But a monolithic kernel was
   easier to implement back at the beginning, so that's what he did. Since
   then, the flaw in microkernel architectures has become clear: the various
   pieces have to communicate, and getting the communication right is a very
   hard problem. A better way, he says, is to put everything you really need
   into a single kernel, but to push everything possible into user space.


-- 
Matthew Miller <mattdm at mattdm.org>
Senior Systems Architect -- Instructional & Research Computing Services
Harvard School of Engineering & Applied Sciences