What's the alternative, just running all code at ring 0? | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		thfuran on May 10, 2023 \| parent \| context \| favorite \| on: Linux kernel use-after-free in Netfilter, local pr... What's the alternative, just running all code at ring 0?

Aerbil313 on May 10, 2023 | [–]

https://www.theseus-os.com/

userbinator on May 10, 2023 | [–]

IMHO rings 0 + 3 with protections against bugs, and not deliberate malice, is probably the sweet spot.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact