first
i know the hurd
second
l4 is a great design
third
if you really read the exokernel manual you will see that it is much more than a microkernel, since it handles network messages, hd blocks etc. fourth
to seperate kernel modules another instance (a first-level kernel)would be needed that would handle ressource registration, for kernel modules which would then run in ring 1. the problem is that if you want to securely seperate them you have to put them into multiple segments.then a call from one module to another would include a call to the first-level-kernel.for all this stub routines could be made which would be mapped into every module segment and the module calls would point to the stup routine which would do the right call the 1st-lv-kernel.there would be no need to change the modules greatly, but the linux kernel would have to be completely modularized.

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.