Re: Combining Hurd and Qubes OS for security reasons? Possible?

Arne Babenhauserheide <[email protected]> Wed, 23 Dec 2015 09:20:37 +0100

Newsgroups	gmane.os.hurd.general
Message-ID	<36276357.nTXJbVLR9C@fluss>

Am Dienstag, 22. Dezember 2015, 18:34:16 schrieb Richard Braun:
> On Tue, Dec 22, 2015 at 06:05:07PM +0100, David Renz wrote:
> > Unless one would be using an open-hardware/openBIOS based system, I don't
> …
> Not being able to easily update firmwares isn't acceptable nowadays.
> Having code running on the hardware is actually perfectly acceptable,
> as long as you are aware and accept that these are small systems of
> their own.

Taking out all the details in-between it sounds like you pretty much
agree (at least on the big picture). If the code on the hardware is a
small system of its own, then it should be free software, which means
it would run openBIOS.

> In the case of ACPI though, I'm not sure whether IOMMUs actually
> enforce access verification in system management mode, but if it
> does, a properly implemented multi-server system with IOMMU
> hardware should be able to provide a high level of security
> despite those shortcomings.

So you mean that with the Hurd it might be possible to get a trusted
system despite having some unfree components?

Best wishes,
Arne

signature.asc (application/pgp-signature, 299 B)