[MirageOS-devel] kernel and security guarantees

[Stefan Xenon <stefanxe@xxxxxxx>]

Hi!
I have two questions on MirageOS' general security:

I understand a significant portion of MirageOS and the entire Xen are
written in type-unsafe C. Even though Ocaml has strong guarantees, how
much does it help as long as the kernel is potentially unsafe? What is
the impact on practical system security? Is there any track record of
exploitable bugs which could help to compare it with other systems?

The micro kernel "seL4 (formally) Verified" has been released as open
source. It sounds like a potentially powerful combination with Mirage.
Would it be feasible to port MirageOS to seL4? Are there any plans to do so?

Regards,
Stefan

_______________________________________________
MirageOS-devel mailing list
MirageOS-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/mirageos-devel