1 repositorio
Creating a new thread that shares the virtual address space but has its own capability space, isolating its access rights.
Distinct from Kernel Thread Spawning: Distinct from Kernel Thread Spawning: focuses on creating threads with separate capability spaces for access control isolation, not general kernel thread creation.
Explore 1 awesome GitHub repository matching software engineering & architecture · Capability-Separated Thread Spawning. Refine with filters or upvote what's useful.
seL4 is a formally verified microkernel whose C implementation is backed by machine-checked mathematical proofs of correctness, confidentiality, integrity, and availability. It enforces strict isolation between processes through hardware-enforced address space separation and a capability-based access control system, where each process holds explicit rights only to the resources it has been granted. The kernel exposes hardware resources through a minimal API of system calls that manage threads, address spaces, and inter-process communication, with synchronous IPC supporting sender-identifying b
Creates threads with isolated capability spaces to enforce access control boundaries between execution contexts.