From mboxrd@z Thu Jan 1 00:00:00 1970 From: Christopher Lemmer Webber Subject: Re: Long term plan for GuixSD security: microkernels, ocap, RISC-V support Date: Mon, 31 Dec 2018 11:16:45 -0500 Message-ID: <878t05llii.fsf@dustycloud.org> References: <87d0u9s1x0.fsf@dustycloud.org> <87bm8nugmv.fsf@inria.fr> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([208.118.235.92]:59387) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1ge0FH-0004uI-JR for guix-devel@gnu.org; Mon, 31 Dec 2018 11:16:52 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1ge0FB-0005RT-Rj for guix-devel@gnu.org; Mon, 31 Dec 2018 11:16:50 -0500 Received: from dustycloud.org ([50.116.34.160]:56956) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1ge0FB-0005Ib-3O for guix-devel@gnu.org; Mon, 31 Dec 2018 11:16:45 -0500 In-reply-to: List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Adonay Felipe Nogueira Cc: guix-devel@gnu.org Adonay Felipe Nogueira writes: > Em 24/09/2018 11:14, Ludovic Court=C3=A8s escreveu: >> Christopher Lemmer Webber skribis: >>> - There's also Google's recent work with Magenta/Fuschia. From what >>> I've read, architecturally this looks right. I think the reason >>> for worry here is the same difficulty the community has had to >>> build actual community and libre distributions on top of the >>> Android ecosystem could apply here. >>=20 >> Indeed. >>=20 >> We could also mention MINIX, which many of us are already using daily. >> :-) >>=20 >> Putting aside Fuschia, I think the Hurd and MINIX are by far the >> solutions that require the less work to be in a state where people with >> =E2=80=9Cregular needs=E2=80=9D like the rest of us to switch (MINIX is = probably in that >> state already.) >>=20 >> The Hurd already has a very advanced POSIX C library, which is not >> negligible, especially compared to the other OSes. Much progress has >> been made in recent years wrt. drivers (using the Rump kernel in >> particular.) There are of course serious shortcomings, in particular >> lack of 64-bit and SMP support. But fixing these is relatively =E2=80= =9Clittle >> work=E2=80=9D in the grand scheme of things. >>=20 >> To put this in perspective, consider Linux namespaces: they have already >> seen years of evolution, and the story of user namespaces shows that >> it=E2=80=99s far from complete. > > I don't know if what I'll say will be off-topic here given that this > list is about Guix development, not on general free/libre software > activism, but please forgive me anyways. > > So, my worry is that if we somehow were to support Fuchsia and if it > were to be not strong auto-upgradable copyleft with community-oriented > enforcement, then we could actually loose the freedoms of the software > for the end user. This thought was initially presented by Eben Moglen > during one of his talks[1], but I just tried to bring the issue to Guix. > > [1] > https://media.libreplanet.org/u/libreplanet/m/the-free-software-movement-= in-the-age-of-trump/ It's a valid concern, and one that applies to seL4 which I have advocated on this thread as well. However, I think we've seen a big difference in "community-run" free software projects under a lax license (which tend to stay free and good for the users) and "corporate-run" throw-the-code-over-the-wall projects (which tend to be less so, and Android is a great example). However in a sense this is why we need to push, as a community, to get our feet into the door of a secure, ocap-powered system for users. Because users *need* and will want that security; systems are just so dangerously insecure. If we don't get the community in there, we'll leave it up to and Android-like sorry state where you've just got some large powers and users and communities desparately trying to figure out how to stay free underneath them, and most users not even trying or know how they could.