lkml.org 
[lkml]   [1996]   [Jun]   [2]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: SVGA kernel chipset drivers.


On Sun, 2 Jun 1996, Ingo Molnar wrote:
>
> besides all the stuff you understand much better than me, kernel traps are
> there to provide entry to a new security domain. With all it's local
> context, which >is< protected. Not so in normal user space. Static data
> structures might get damaged if in the same process.

Take a closer look at how I suggested people do the "svgaserver".

The server does a fork(), and the child does all the graphics stuff,
exactly so that the parent can't be impacted by a buggy (or malicious)
graphics program.

Essentially, this already sets up the protection domains. The server is
protected, yet the fork() inheritance is able to give the graphics
program all the resources it needs, and nothing more.

> simple: a kernel trap is currently the cheapest protection domain switch

We don't need to switch protection domains more than once. We just need
to set up the frame buffer, put it into graphics mode, and then the
graphics program can just use it directly. This is all assuming the card
has a sane frame buffer and doesn't need more than the map (and perhaps
some IO port access, but that is also set up by the startup stuff).

I mean, you've all been trying to say that all graphics cards have frame
buffers, so why aren't you happy now that I gave you a protected
frame-buffer without a line of kernel code? What more do you want?

Linus


\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.089 / U:0.356 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site