Invisible <voi### [at] devnull> wrote:
> - Let the compiler enforce program isolation, not the processor 
> hardware. (That works great if everybody uses your compiler, but I'm not 
> sure what happens if you allow arbitrary 3rd party code to execute...)

  The only way to make an OS secure is to have hardware support. Hardware
is the only thing that can stop a program from accessing what it must not
access.

  (Ok, there's another alternative: Run the programs under an emulator.
Of course this is out of question because of speed issues.)

-- 
                                                          - Warp

Post a reply to this message