Show Navigation

Public
- Public
- Network
- Groups
- Popular
- People

Conversation

Notices

Matrix.org (matrix@mastodon.matrix.org)'s status on Saturday, 25-Jun-2022 06:37:04 EDT Matrix.org

RT @avsm@twitter.com
Void Processes: a first step towards building a capability-based Linux. Jake Hillion's @Cambridge_CL@twitter.com Part III project that opens up a new research direction for minimal-privilege processes on Linux using (the many) namespace APIs. https://blog.hillion.co.uk/posts/void-processes/dissertation/
🐦🔗: https://twitter.com/avsm/status/1540302121970663424
In conversation Saturday, 25-Jun-2022 06:37:04 EDT from mastodon.matrix.org permalink
Attachments
1. File without filename could not get a thumbnail source.
  
  Void Processes: Minimising privilege by default
  
  from Jake Hillion
  
  Recently I concluded the work on my Part III (M.Eng) dissertation. This was on Void Processes, a mechanism to statically distribute fine-grained privilege to application processes on Linux. My dissertation is available here. I plan to make a series of posts over the next few weeks documenting my findings in smaller snippets, particularly the experience of voiding mount namespaces. In the future, I hope to produce some work which increases the performance of creating empty namespaces.

Jonkman Microblog is a social network, courtesy of SOBAC Microcomputer Services. It runs on GNU social, version 1.2.0-beta5, available under the GNU Affero General Public License.

All Jonkman Microblog content and data are available under the Creative Commons Attribution 3.0 license.

Switch to desktop site layout.