Я тут подписан на лист firewall-wizards - весьма приличный лист, модерируемый Marcus J. Ranum - личность в этой области весьма известная. Я приведу несколько его ответов. Надо отметить, что я с ним почти во все согласен. Но приведенные письма интересны не только с точки зрения безопасности, а и с точки зрения на ПО вообще. На мой взгляд, здесь и переклички с реестром, и с надежностью ОС, и безопосностью в сети.
Ryan M. Ferris wrote:
>I think what is missing here from this discussion is a more serious >debate >on the inherent security differences between monolithic kernels and >micro-kernels. Or perhaps real-time versus non-real time OS. There hasn't been a lot of discussion around those issues
because there's not a lot of "there" there. "microkernels" are
mostly marketing hype, not a real technology. Nowadays, the
hardware abstraction layers for physical devices probably
represent more code than the entire V7 UNIX kernel. So what
should we call QNX? a "pico kernel"?

See? It's just marketing.
The real question is complexity and management of complexity.
In
theory non-monolithic kernels are less complex, but in fact
what you've done is just shuffled the complexity around into
another place. So what if the filesystem is a separate process
from the scheduler, VM system, and IP stack? You still depend on
it just as much, and you've now got the additional worry of
making sure that the channel between kernel modules is tamper
proof
AND fast. Basically, you can't win. What happens is
that when security is applied to a non-monolithic kernel all
the developers heave a sigh of relief and conclude that security
is no longer THEIR PROB…
Дальше »»»