[seL4] Re: Operating Systems built on top of seL4

On 31 Jul 2021, at 20:20, Hugo V.C. wrote:

"Therefore the process server will be almost as important as the kernel when it comes to security"

I'm not developer, so please excuse my ignorance in some topics (like OS dev), but, I've experience in exploiting OS stuff and I always prefer a ring 0 vuln than a ring 3 vuln... If the process server is implemented at user space (ring 3) then I don't get how we can compare security in so different cpu execution modes. Am I missing something?

I agree. It seems that Andrew’s design looks pretty monolithic. Gernot