For security purposes, you should keep L4Linux from being able to access sensitive data or otherwise cause problems. The sensitive stuff (e.g. crypto) should be running on Genode instead of in L4Linux, or at least in a separate L4Linux system. For security purposes, think of L4Linux as a fast virtual machine.
On Sun, Jul 26, 2015 at 4:44 AM, Thotheolh Tay <twzgerald@...9...> wrote:
Hi,
I would like some help understanding the below described scenario.
An L4Linux/Genode/Fiasco.OC is used as the secure environment. If a malware is executed on a process thread on the L4Linux layer, say to scrape the L4Linux to do memory dumps or to access the filesystem for crypto key files, how will the above setup protect against a malicious process thread ? An example being a PGP email crypto program running on a process thread with another process thread infected by a malware.
Thanks & Regards, Thoth.
genode-main mailing list genode-main@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/genode-main