The traditional approach is to have drivers run in kernel space. If there ends up being an issue, it could crash the entire system instead of just the relevant process. From the security side of things, in the traditional drivers are run with the highest set of security capabilities. A flaw in a driver that allows, say code execution, would run that code as a high privileged user (usually a system user root in the case of *nix). Running then in her space dramatically lowers the impact of exploitation.
I find the idea of a modern practically usable OS really exciting, so this is awesome!
It says “Drivers run in Userspace” on the front page of Redox - what is the advantage of this? I don’t know too much about drivers.
The advantage is that drivers are isolated in separate processes with fewer permissions.
The two big benefits are security and stability.
The traditional approach is to have drivers run in kernel space. If there ends up being an issue, it could crash the entire system instead of just the relevant process. From the security side of things, in the traditional drivers are run with the highest set of security capabilities. A flaw in a driver that allows, say code execution, would run that code as a high privileged user (usually a system user root in the case of *nix). Running then in her space dramatically lowers the impact of exploitation.