You are not hearing me. I agree with you.
I want to start ripping things out, and eventually rip out the kernel too.
The modern smartphone approach has too much bloat to ever be fully reviewed or trusted in the way I want.
Conversation
Yeah, and so does Linux, or Chromium. You certainly can't use an ARM SoC which is actually largely a black box (unlike a closed source library where you have all the unobfuscated, simply compiled code, and could review it in the that form, which may even be better for your goal).
1
1
So, no web browser with what you want to do, and definitely no massive monolithic kernel with immense intertwined complexity like Linux. It's far harder to review Linux than even 10x or more code spread out into small components with clear boundaries and APIs.
1
You seem to have a very warped idea of how code review works and what it accomplishes, especially if there is actually supposed to be understanding of the code as a whole, and full review of all of it. That's just not realistic for a project like Linux or a web rendering engine.
1
No team is ever going to be able to fully review and understand a project like Linux. It is beyond human understanding / capabilities. It's immensely complex without clear boundaries between different things. No one is even attempting to do any kind of full picture review of it.
2
As I have said several times now, I do not think anyone stands a chance of fully reviewing or auditing the Linux kernel.
I do however see that as a placeholder while everything else gets stripped down.
I want the Linux kernel replaced with a microkernel.
1
It's not something that can simply be replaced with a drop-in replacement unless that includes running the Linux kernel on top of it or using gVisor which is what we are considering doing in the long term for GrapheneOS. You'll be building around how Linux and *nix works.
1
1
If app compat with an existing platform is a non-goal, it doesn't really fit. There are projects and companies developing devices meant to be secure in a much more meaningful way. I do not think it can be built on the Linux kernel, and definitely not any major Linux distribution.
2
1
If the Linux kernel is the core of the OS, then I don't think all this concern about the possibility of backdoors, etc. makes much sense at all. There are far bigger problems. There are plentiful critical severity code execution bugs and it's probably getting worse, not better.
2
Every major release of the Linux kernel adds substantial complexity and attack surface. Components get increasingly complex with the focus on ever increasing features and performance through complexity. Added mitigations hardly accomplish anything in the grand scheme of things.
2
Simply using the Linux kernel at the core at all is giving up on any goal of making something meaningfully secure and it renders the extreme concern about these theoretical backdoors in device support libraries such a moot point. They could be reviewed more easily than Linux...