From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-lj1-f173.google.com (mail-lj1-f173.google.com [209.85.208.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id D1B0E70 for ; Tue, 20 Jul 2021 22:42:59 +0000 (UTC) Received: by mail-lj1-f173.google.com with SMTP id q4so408868ljp.13 for ; Tue, 20 Jul 2021 15:42:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linaro.org; s=google; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=+jSe6SKHWwNunOEsVvFI3ZvLrFzsWYWZjwjCpEheqL0=; b=xpzSp0SPDR6mDW7ZTEoC/Q/SbFECPwd9uZKg+E6Oef0h+r7LxhoxVQZJFTiE4oUZEy tI84N9J9QDPhHDFvnaQrsl+/7E03nwdtLtTeeqQRyc5KXHHlFdr+hSNwa9pYv1ze3Mea 24b3+ILpFZ5F1NlJmK3QeSDJ3JfVeys2sPT6zP5FOwItPmoIpvBWabN155nC15xjr2bO lklaMScR21XWzzG/D6GMOnR+tA5Rp3DXdkSBwuqH0VhyeshidevljGamP5SgHm6rvHBG gSSn6M2EX25yakqMNC2DlsonQUr2VmlL0nuomUsa8pqxCUPCQnx8eguEEKyFKfSAw07v pqdA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=+jSe6SKHWwNunOEsVvFI3ZvLrFzsWYWZjwjCpEheqL0=; b=jXZEITafS8YUFE2jGeyCCezIyKQtV5tZWpYHZoNmBjf5z/C973u7y6OOBj+9riVny2 L/urpJo+g7kdC94tU1LO27r3Q1bZ6MTzgUxmvtwcZml4ZLD76CKsmjZy9yoTBfBZkN3P YiHR0kCJEjVUHHrb1HKpzznIdwjtK+TEuQkJmqNypPKHpXiJt1vDcq2HTZK6BMAHAwj+ HD1FSe4kITEK5l04WuEFiXckTnDd2i3l92DEjynP+wHz2c2Qrhh46gqoZTRtT2DZQ5Sg B2rxSh6O8yG09fkPG1w0cvrd9m5BO9cGxAeV5UYlZtEgCURaQXnwSFhYsht9NC9OxCfd XuFw== X-Gm-Message-State: AOAM530UCnogd0kmwWgoTeCgw6w27EXDfvFN5ixvdZuQ//ohum+MJNOl lgtyXWVgrJVWb4OOe16vESlXu3Zwl+vjEB7v6HAUYg== X-Google-Smtp-Source: ABdhPJzBoC/1+PMwNBNibUkpnzZ0s2bW44yP3jGg68HnWQ9nNLgSfYwtqfJuF5sOUMMKerEC9Q+XBLnFuGfstHiO5U8= X-Received: by 2002:a2e:b04e:: with SMTP id d14mr29528465ljl.74.1626820977839; Tue, 20 Jul 2021 15:42:57 -0700 (PDT) Precedence: bulk X-Mailing-List: ksummit@lists.linux.dev List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 References: <20210707203827.GI18396@quack2.suse.cz> In-Reply-To: From: Linus Walleij Date: Wed, 21 Jul 2021 00:42:46 +0200 Message-ID: Subject: Re: [TECH TOPIC] Rust for Linux To: Miguel Ojeda Cc: Wedson Almeida Filho , Greg KH , Bartosz Golaszewski , Kees Cook , Jan Kara , James Bottomley , Julia Lawall , Laurent Pinchart , Roland Dreier , ksummit@lists.linux.dev, Viresh Kumar Content-Type: text/plain; charset="UTF-8" On Tue, Jul 20, 2021 at 3:21 AM Miguel Ojeda wrote: > On Tue, Jul 20, 2021 at 12:16 AM Linus Walleij wrote: > > To that end the core of the GPIO library would probably > > have to be rewritten in Rust and used on *all* platforms > > in order to buy us any improved security. I understand that > > I do not agree: a bug in a driver can cause havok of all kinds in a > system, security-wise or otherwise. One does not need to rewrite the > entire kernel in Rust to start to see benefits. I understand and I see that Wedson also came up with some ideas on how Rust can actually protect against some DoS type attacks. But what attackers (who by the way are organized, well-funded and pretty evil people) are creating and what is our biggest headache is remote root exploits that open up systems to random code execution, and that is why we have to take Rust to the enemy lines IMO, because that is where it will deliver shock and awe. The problem is not a few saboteurs in our factories in our homeland but on the frontline with the enemy if you excuse the war metaphor. I want to see Rust weaponized against the people who attack our kernel. Yours, Linus Walleij