This looks very similar to webassembly work going on right now, both use a secure VM, and both run in kernel space.
Would webassembly be a more general purpose way of accomplishing something like this?
Would webassembly be a more general purpose way of accomplishing something like this?
But I got your point. Thanks!
One is suitable for embedding into a kernel, the other isn't.
It is also WASI runtime. WebAssembly runtime proper (core/iwasm/runtime directory) is more like 10K.
I'd be very surprised if the linux kernel doesn't eventually get web assembly support.
Well currently we run code (e.g. drivers) as trusted full-permission code. Surely, web-assembly would be better than this from a security perspective.
Basic examples: code that takes a lock and never releases it, code that loops forever, code that leaks kernel resources.
Then how can you possibly know? Do you just assume that because it has "Web" in the name, it must be insanely complicated?
Perhaps WebAssembly kernel-space programming would still be viable for major trusted projects, like Kafka, where you literally dedicate the entire machine to that application.