Lang Sep

References:

More

  • Fidelius Charm: Isolating Unsafe Rust Code
  • Reference 1 Rust: memory safety is lost when any unsafe blocks are used. Fedelius Charm(FC): limiting access to the program’s memory while executing unsafe libraries: move sensitive program data to protected pages before entering unsafe code; call userspace lib e.g. fc_immutable in which call system call mprotect to change page permission bits and switch to isolated mode; allow unsafe code to run normally without modifications; restore visibility of the protected state when unsafe code completes; call userspace lib e.

Created Dec 19, 2020 // Last Updated May 18, 2021

If you could revise
the fundmental principles of
computer system design
to improve security...

... what would you change?