IBM Developers Looking At Adding System Call Isolation To Enhance Linux Security

[phoronix]

Phoronix: IBM Developers Looking At Adding System Call Isolation To Enhance Linux Security

Developers at IBM are working on a new concept for the Linux kernel of "system call isolation" in order to isolate parts of the kernel when impacted by vulnerabilities...

http://www.phoronix.com/scan.php?page=news_item&px=Linux-System-Call-Isolation

[elatllat]

#Redox-OS

[Mavman]

#genode (+seL4)

[Ironmask]

This reminds me of Greenspun's tenth rule. I guess after Linux is sufficiently advanced it'll contain an ad-hoc, informally-specified implementation of a microkernel.
But for real, it's always nice to see big companies implementing new features that the average person wouldn't be able to design and implement alone.