Mac Developer: How Google's Project Zero made Apple refactor its kernel • The Register
How Google's Project Zero made Apple refactor its kernel • The Register: "It took eight months, apparently, because of a basic architectural feature of the kernel: calling target functions directly instead of via the MIG IPC (Mach interface generator inter process communication) layer is fast, but “there’s no central point where access to a resource can be cut off”."
That pesky monolithic kernel is longing for the microkernel promised land. QNX forever!
Labels: security policy