Linux Kernel

Google wants to help improve memory security in Linux kernel

The nonprofit Internet Security Research Group (ISRG), with financial support from Google, hired Linux kernel developer Miguel Ojeda to work to bring the benefits of the Rust programming language Linux core.

ISRG, which also supports the free version of Let’s Encrypt SSL certification authority, hired Ojeda to work full time on extending the use of Rust as a second language to the Linux kernel, which is written in C. Ojeda has been working on this effort as a side project for some time.

Several developers and organizations like Google have wanted Rust, which provides security guarantees with its memory that make it particularly useful for programming low-level systems.

“We understand that working in something as widely used and critical as the Linux kernel takes time, but we are delighted to be able to help the ISRG to support Miguel Ojeda’s work on improving the security of the kernel memory for everyone, ”said Dan Lorenc. , software engineer at Google.

Second language

As part of his efforts, Ojeda set up the Rust group for Linux and even managed to add the initial infrastructure for Rust to be used in the Linux kernel in the kernel development stream named Linux-Next.

A few months ago in April, Ojeda sent a request for comments (RFC) to the kernel mailing list detailing the benefits of adding Rust code to the main kernel, which the ISRG describes as “a perfect example of the consideration and diligence that go into his efforts.

Even Linus Torvalds, the main developer of the main core, isn’t totally against the idea. Although he admitted having technical reservations on this subject, he was ready to participate in the discussions.

Google’s interest in Rust is not academic. The company has has already given the green light to the use of Rust in Androidlow-level system code in order to quell the growing number of memory-based security vulnerabilities in the mobile operating system.


Source link

Leave a Reply

Your email address will not be published. Required fields are marked *