Главная
Study mode:
on
1
Intro
2
Zephyr vs. Linux
3
So What's the Problem?
4
High Level Security Objectives
5
User Mode Threads
6
Build Generation
7
Object Metadata
8
Futex-like objects
9
Dynamic Kernel Objects
10
System Calls Flowchart
11
MPU Hardware - SAM E70 Example
12
Memory Domains / Kernel Object Permissions
13
Automatic Memory Domain Setup
14
Automatic Memory Partitioning
15
Resource Allocation
16
Wrap-Up
Description:
Explore MPU-based memory protection features in the Zephyr RTOS through this 35-minute conference talk. Learn about novel techniques for overcoming MPU hardware limitations, implementing security domains in physical memory maps, and maintaining API compatibility across platforms. Discover the permission management system for controlling access to kernel objects and device driver instances, as well as the handling of static and dynamically allocated kernel objects. Gain insights into routing global objects to application memory domains, managing size/alignment constraints of MPU hardware, and defining system calls. Examine the implementation of futex-like capabilities for IPC mechanisms and uncover ongoing areas of development in Zephyr OS memory protection.

Zephyr OS Memory Protection

Linux Foundation
Add to list
0:00 / 0:00