Secure Coding mailing list archives

Re: Andy Tanenbaum on Linux's origins and security


From: der Mouse <mouse () Rodents Montreal QC CA>
Date: Fri, 21 May 2004 14:18:13 +0100

At the very end of the document, [Andy Tanenbaum] talks about the
security of a microkernel system like (his own) MINIX vs. that of a
monolithic kernel like Linux.  He writes, "With all the security
problems Windows has now, it is increasingly obvious to everyone that
tiny microkernels, like that of MINIX, are a better base for
operating systems than huge monolithic systems.

This is an amazing leap of illogic.  I see no particular reason to
ascribe _any_ of Windows' insecurity to its monolithic architecture (as
opposed to, say, Microsoft's duty to its shareholders to cut quality,
and therefore costs, as far as is not inconsistent with the result
still selling).

[A.T. writes further:] As I did 20 years ago, I still fervently
believe that the only way to make software secure, reliable, and fast
is to make it small.  Fight Features.

Indeed.  And still with no bearing on whether the system putatively
containing those features is designed microkernel or monolithic.  In
view of this, comparing against Linux (a kitchen-sink system if I ever
saw one) is unfair; he should be comparing against one of the BSDs, if
he wants an open-source monolithic Unix variant.

There _are_ security benefits to microkernel designs, it's true, but
there are also security benefits to monolithic designs, and which
outweighs the other is a decision each system's architect must make -
it certainly isn't a slam-dunk either way, to me.

/~\ The ASCII                           der Mouse
\ / Ribbon Campaign
 X  Against HTML               [EMAIL PROTECTED]
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B






Current thread: