Messages in this thread | | | Date | Fri, 24 Feb 2012 07:38:11 -0800 | From | Greg KH <> | Subject | Re: Can we move device drivers into user-space? |
| |
On Fri, Feb 24, 2012 at 10:19:36AM -0500, Jidong Xiao wrote: > On Wed, Feb 22, 2012 at 11:56 PM, Jidong Xiao <jidong.xiao@gmail.com> wrote: > > Hi, > > > > I am just curious. Since the concept user-space device drivers has > > been proposed for several years, and some related projects and > > research papers have demonstrated the feasibility of of moving device > > drivers into use space. In particular, this paper: > > > > Tolerating Malicious Device Drivers in Linux. > > http://pdos.csail.mit.edu/papers/sud:usenix10.pdf > > > > In this paper, existing device driver code need not to be changed, > > which should help the idea to be applied in practice. > > > > The advantage and disadvantage of move device drivers into use space > > of both obvious: > > > > Advantage: Since most of kernel bugs are caused by device drivers > > issues, moving device drivers into user space can reduce the impact of > > device driver bugs. From security perspective, the system can be more > > secure and robust if most device drivers are working in user space. > > Disadvantage: At least, existing techniques as well as the above paper > > showed a relatively high overhead. > > > > So is it mainly because the high overhead that prevents the user-space > > device drivers ideas being accepted in Linux? > > > > Actually, my major concern is, since UIO has been accepted, then why > don't we move all the rest device drivers into user space as well. As > I understand, currently, some of device drivers are running on user > space, while the other (or say the majority of) device drivers are > running on kernel space, so why don't we maintain a consistent device > drivers infrastructure, say, either all in user space, or all in > kernel space. (Sure some critical device drivers still need to be kept > in kernel space.)
Feel free to create patches to do so, and handle all of the userspace changes needed in order to implement this.
I think you haven't thought through the true reason we have device drivers, and why Linux isn't a microkernel...
And I'd take exception to your "advantage:" line above, I don't believe that is true at all.
Best of luck with your work,
greg k-h
| |