Security compartmentalisation

Hi,

I would like some help understanding the below described scenario.

An L4Linux/Genode/Fiasco.OC is used as the secure environment. If a malware is executed on a process thread on the L4Linux layer, say to scrape the L4Linux to do memory dumps or to access the filesystem for crypto key files, how will the above setup protect against a malicious process thread ? An example being a PGP email crypto program running on a process thread with another process thread infected by a malware.

Thanks & Regards, Thoth.