SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>EROS (microkernel)</title>

</head>

<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">EROS (microkernel)</span></span>

</h1>

</header>

/* start https://en.wikipedia.org/ */

.mw-parser-output .infobox-subbox{padding:0;border:none;margin:-3px;width:auto;min-width:100%;font-size:100%;clear:none;float:none;background-color:transparent}.mw-parser-output .infobox-3cols-child{margin:auto}.mw-parser-output .infobox .navbar{font-size:100%}@media screen{html.skin-theme-clientpref-night .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .infobox-full-data:not(.notheme)>div:not(.notheme)[style]{background:#1f1f23!important;color:#f8f9fa}}@media(min-width:640px){body.skin--responsive .mw-parser-output .infobox-table{display:table!important}body.skin--responsive .mw-parser-output .infobox-table>caption{display:table-caption!important}body.skin--responsive .mw-parser-output .infobox-table>tbody{display:table-row-group}body.skin--responsive .mw-parser-output .infobox-table th,body.skin--responsive .mw-parser-output .infobox-table td{padding-left:inherit;padding-right:inherit}}

/* end https://en.wikipedia.org/ */

</style><table class="infobox vevent"><tbody><tr><th colspan="2" class="infobox-above" style="background-color: #e0e0e0;">EROS</th></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Programmer" title="Programmer">Developer</a></th><td class="infobox-data"><a href="University_of_Pennsylvania" title="University of Pennsylvania">University of Pennsylvania</a><br><a href="Johns_Hopkins_University" title="Johns Hopkins University">Johns Hopkins University</a><br>The EROS Group, LLC</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Programming_language" title="Programming language">Written in</a></th><td class="infobox-data"><a href="C_(programming_language)" title="C (programming language)">C</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">OS family</th><td class="infobox-data"><a href="Capability-based_security" title="Capability-based security">Capability-based</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Working state</th><td class="infobox-data">Discontinued</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Initial release</th><td class="infobox-data">1991<span style="display:none"> (<span class="bday dtstart published updated">1991</span>)</span></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Software_release_life_cycle" title="Software release life cycle">Latest release</a></th><td class="infobox-data">Final / 2005<span style="display:none"> (<span class="bday dtstart published updated">2005</span>)</span></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Marketing target</th><td class="infobox-data">Research</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Available in</th><td class="infobox-data">English</td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Update method</th><td class="infobox-data">Compile from <a href="Source_code" title="Source code">source code</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Supported platforms</th><td class="infobox-data"><a href="IA-32" title="IA-32">IA-32</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="Kernel_(operating_system)" title="Kernel (operating system)">Kernel</a> type</th><td class="infobox-data"><a href="Real-time_operating_system" title="Real-time operating system">Real-time</a> <a href="Microkernel" title="Microkernel">microkernel</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;"><a href="User_interface" title="User interface">Default<br>user interface</a></th><td class="infobox-data"><a href="Command-line_interface" title="Command-line interface">Command-line interface</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Preceded by</th><td class="infobox-data"><a href="KeyKOS" title="KeyKOS">KeyKOS</a></td></tr><tr><th scope="row" class="infobox-label" style="white-space: nowrap;">Succeeded by</th><td class="infobox-data">CapROS</td></tr></tbody></table>

<p><b>Extremely Reliable Operating System</b> (<b>EROS</b>) is an <a href="Operating_system" title="Operating system">operating system</a> developed starting in 1991 at the <a href="University_of_Pennsylvania" title="University of Pennsylvania">University of Pennsylvania</a>, and then <a href="Johns_Hopkins_University" title="Johns Hopkins University">Johns Hopkins University</a>, and The EROS Group, LLC. Features include automatic data and process <a href="Orthogonal_persistence" class="mw-redirect" title="Orthogonal persistence">persistence</a>, some preliminary <a href="Real-time_operating_system" title="Real-time operating system">real-time</a> support, and <a href="Capability-based_security" title="Capability-based security">capability-based security</a>. EROS is purely a research operating system, and was never deployed in real world use. As of 2005, development stopped in favor of a successor system, CapROS.

</p>

<div class="mw-heading mw-heading2"><h2 id="Key_concepts">Key concepts</h2></div>

<p>The overriding goal of the EROS system (and its relatives) is to provide strong support at the operating system level for the efficient restructuring of critical applications into small communicating components. Each component can communicate with the others only through protected interfaces, and is isolated from the rest of the system. A <i>protected interface</i>, in this context, is one that is enforced by the lowest level part of the operating system, the <a href="Kernel_(operating_system)" title="Kernel (operating system)">kernel</a>. That is the only part of the system that can move information from one <a href="Process_(computing)" title="Process (computing)">process</a> to another. It also has complete control of the machine and (if properly constructed) cannot be bypassed. In EROS, the kernel-provided mechanism by which one component names and invokes the services of another is a <a href="Capability-based_security" title="Capability-based security">capability</a>, using <a href="Inter-process_communication" title="Inter-process communication">inter-process communication</a> (IPC). By enforcing capability-protected interfaces, the kernel ensures that all communications to a process arrive via an intentionally exported interface. It also ensures that <i>no</i> invocation is possible unless the invoking component holds a valid capability to the invoked component. Protection in capability systems is achieved by restricting the propagation of capabilities from one component to another, often through a security policy termed <i>confinement</i>.

</p><p>Capability systems naturally promote component-based software structure. This organizational approach is similar to the programming language concept of <a href="Object-oriented_programming" title="Object-oriented programming">object-oriented programming</a>, but occurs at larger granularity and does not include the concept of <a href="Inheritance_(object-oriented_programming)" title="Inheritance (object-oriented programming)">inheritance</a>. When software is restructured in this way, several benefits emerge:

</p>

<ul><li>The individual components are most naturally structured as <a href="Event-driven_programming" title="Event-driven programming">event loops</a>. Examples of systems that are commonly structured this way include <a href="Aircraft_flight_control_system" title="Aircraft flight control system">aircraft flight control systems</a> (see also <a href="DO-178B" title="DO-178B">DO-178B Software Considerations in Airborne Systems and Equipment Certification</a>), and telephone switching systems (see <a href="5ESS_switch" class="mw-redirect" title="5ESS switch">5ESS switch</a>). Event-driven programming is chosen for these systems mainly because of simplicity and robustness, which are essential attributes in life-critical and mission-critical systems.</li>

<li>Components become smaller and individually testable, which helps to more readily isolate and identify flaws and bugs.</li>

<li>The isolation of each component from the others limits the scope of any damage that may occur when something goes wrong or the software misbehaves.</li></ul>

<p>Collectively, these benefits lead to measurably more robust and secure systems. The <a href="Plessey_System_250" title="Plessey System 250">Plessey System 250</a> was a system originally designed for use in telephony switches, which capability-based design was chosen specifically for reasons of robustness.

</p><p>In contrast to many earlier systems, capabilities are the <i>only</i> mechanism for naming and using resources in EROS, making it what is sometimes referred to as a <i>pure</i> capability system. In contrast, <a href="IBM_i" title="IBM i">IBM i</a> is an example of a commercially successful capability system, but it is not a pure capability system.

</p><p>Pure capability architectures are supported by well-tested and mature mathematical security models. These have been used to formally demonstrate that capability-based systems can be made secure if implemented correctly. The so-called "safety property" has been shown to be decidable for pure capability systems (see <a href="#Lipton">Lipton</a>). Confinement, which is the fundamental building block of isolation, has been formally verified to be enforceable by pure capability systems,<sup id="cite_ref-1" class="reference"><a href="#cite_note-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup> and is reduced to practical implementation by the EROS <i>constructor</i> and the KeyKOS <i>factory</i>. No comparable verification exists for any other primitive protection mechanism. There is a fundamental result in the literature showing that <i>safety</i> is mathematically undecidable in the general case (see <a href="HRU_(security)" title="HRU (security)">HRU</a>, but note that it is of course provable for an unbounded set of restricted cases<sup id="cite_ref-2" class="reference"><a href="#cite_note-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup>). Of greater practical importance, safety has been shown to be <i>false</i> for all of the primitive protection mechanisms shipping in current commodity operating systems. Safety is a necessary precondition to successful enforcement of <i>any</i> security policy. In practical terms, this result means that it is not possible <i>in principle</i> to secure current commodity systems, but it is potentially possible to secure capability-based systems <i>provided</i> they are implemented with sufficient care. Neither EROS nor KeyKOS has ever been successfully penetrated, and their isolation mechanisms have never been successfully defeated by any inside attacker, but it is not known whether the two implementations were careful enough. One goal of the Coyotos project was to demonstrate that component isolation and security has been definitively achieved by applying software verification techniques.

</p><p>The L4.sec system, which is a successor to the <a href="L4_microkernel_family" title="L4 microkernel family">L4 microkernel family</a>, is a capability-based system, and has been significantly influenced by the results of the EROS project. The influence is mutual, since the EROS work on high-performance invocation was motivated strongly by <a href="Jochen_Liedtke" title="Jochen Liedtke">Jochen Liedtke</a>'s successes with the <a href="L4_microkernel_family" title="L4 microkernel family">L4 microkernel family</a>.

</p>

<div class="mw-heading mw-heading2"><h2 id="History">History</h2></div>

<p>The primary developer of EROS was Jonathan S. Shapiro. He was also the driving force behind Coyotos, which was an "evolutionary step"<sup id="cite_ref-3" class="reference"><a href="#cite_note-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup> beyond the EROS operating system.<sup id="cite_ref-Coyotos_4-0" class="reference"><a href="#cite_note-Coyotos-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup>

</p><p>The EROS project started in 1991 as a clean-room reconstruction of an earlier operating system, <a href="KeyKOS" title="KeyKOS">KeyKOS</a>. KeyKOS was developed by Key Logic, Inc., and was a direct continuation of work on the earlier <i>Great New Operating System In the Sky</i> (<a href="GNOSIS" title="GNOSIS">GNOSIS</a>) system created by Tymshare, Inc. The circumstances surrounding Key Logic's demise in 1991 made licensing KeyKOS impractical. Since KeyKOS did not run on popular commodity processors in any case, the decision was made to reconstruct it from the publicly available documentation.

</p><p>By late 1992, it had become clear that processor architecture had changed significantly since the introduction of the capability idea, and it was no longer obvious that component-structured systems were practical. <a href="Microkernel" title="Microkernel">Microkernel</a>-based systems, which similarly favor large numbers of processes and IPC, were facing severe performance challenges, and it was uncertain if these could be successfully resolved. The <a href="X86" title="X86">x86</a> architecture was clearly emerging as the dominant architecture but the expensive user/supervisor transition latency on the <a href="Intel_80386" class="mw-redirect" title="Intel 80386">386</a> and <a href="Intel_80486" class="mw-redirect" title="Intel 80486">486</a> presented serious challenges for process-based isolation. The EROS project was turning into a research effort, and moved to the <a href="University_of_Pennsylvania" title="University of Pennsylvania">University of Pennsylvania</a> to become the focus of Shapiro's dissertation research. By 1999, a high performance implementation for the <a href="Pentium" title="Pentium">Pentium</a> processor had been demonstrated that was directly performance competitive with the <a href="L4_microkernel_family" title="L4 microkernel family">L4 microkernel family</a>, which is known for its exceptional speed in IPC. The EROS confinement mechanism had been formally verified, in the process creating a general formal model for secure capability systems.

</p><p>In 2000, Shapiro joined the faculty of Computer Science at Johns Hopkins University. At Hopkins, the goal was to show how to <i>use</i> the facilities provided by the EROS kernel to construct secure and defensible servers at application level. Funded by the <a href="Defense_Advanced_Research_Projects_Agency" class="mw-redirect" title="Defense Advanced Research Projects Agency">Defense Advanced Research Projects Agency</a> and the <a href="Air_Force_Research_Laboratory" title="Air Force Research Laboratory">Air Force Research Laboratory</a>, EROS was used as the basis for a trusted window system,<sup id="cite_ref-5" class="reference"><a href="#cite_note-5"><span class="cite-bracket">[</span>5<span class="cite-bracket">]</span></a></sup> a high-performance, defensible network stack,<sup id="cite_ref-6" class="reference"><a href="#cite_note-6"><span class="cite-bracket">[</span>6<span class="cite-bracket">]</span></a></sup> and the beginnings of a secure web browser. It was also used to explore the effectiveness of lightweight static checking.<sup id="cite_ref-7" class="reference"><a href="#cite_note-7"><span class="cite-bracket">[</span>7<span class="cite-bracket">]</span></a></sup> In 2003, some very challenging security issues were discovered<sup id="cite_ref-8" class="reference"><a href="#cite_note-8"><span class="cite-bracket">[</span>8<span class="cite-bracket">]</span></a></sup> that are intrinsic to <i>any</i> system architecture based on synchronous IPC primitives (notably including EROS and L4). Work on EROS halted in favor of Coyotos, which resolved these issues.

</p><p>As of 2006, EROS and its successors are the only widely available capability systems that run on commodity hardware.

</p>

<div class="mw-heading mw-heading2"><h2 id="Status">Status</h2></div>

<p>Work on EROS and Coyotos by the original group has halted, but there is a successor system.<sup id="cite_ref-Coyotos_4-1" class="reference"><a href="#cite_note-Coyotos-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup> CapROS (Capability Based Reliable Operating System), a successor of EROS, is an open-source, commercially oriented operating system.<sup id="cite_ref-9" class="reference"><a href="#cite_note-9"><span class="cite-bracket">[</span>9<span class="cite-bracket">]</span></a></sup>

</p>

<ul><li><a href="Nanokernel" class="mw-redirect" title="Nanokernel">Nanokernel</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite id="CITEREFShapiroWeber1999" class="citation conference cs1">Shapiro, Jonathan S.; Weber, Samuel (October 29, 1999). <a rel="nofollow" class="external text" href="https://flint.cs.yale.edu/cs428/doc/eros-verify.pdf"><i>Verifying the EROS Confinement Mechanism</i></a> <span class="cs1-format">(PDF)</span>. 2000 IEEE Symposium on Security and Privacy. Berkeley, CA, USA. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.1109%2FSECPRI.2000.848454">10.1109/SECPRI.2000.848454</a>.</cite></span>

</li>

<li id="cite_note-2"><span class="mw-cite-backlink"><b><a href="#cite_ref-2">^</a></b></span> <span class="reference-text"><cite id="CITEREFLee" class="citation web cs1">Lee, Peter. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20060922165628/https://www.cs.cmu.edu/~petel/papers/pcc/">"Proof-Carrying Code"</a>. Archived from <a rel="nofollow" class="external text" href="https://www.cs.cmu.edu/~petel/papers/pcc/">the original</a> on September 22, 2006.</cite></span>

</li>

<li id="cite_note-3"><span class="mw-cite-backlink"><b><a href="#cite_ref-3">^</a></b></span> <span class="reference-text"><cite id="CITEREFShapiro2006" class="citation web cs1">Shapiro, Jonathan (April 2, 2006). <a rel="nofollow" class="external text" href="https://archive.today/20120731181325/http://www.coyotos.org/docs/misc/eros-comparison.html">"Differences Between Coyotos and EROS: A Quick Summary"</a>. Archived from <a rel="nofollow" class="external text" href="http://www.coyotos.org/docs/misc/eros-comparison.html">the original</a> on 2012-07-31.</cite></span>

</li>

<li id="cite_note-Coyotos-4"><span class="mw-cite-backlink">^ <a href="#cite_ref-Coyotos_4-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-Coyotos_4-1"><sup><i><b>b</b></i></sup></a></span> <span class="reference-text"><cite id="CITEREFShapiro2009" class="citation mailinglist cs1">Shapiro, Jonathan S. (April 7, 2009). <a rel="nofollow" class="external text" href="https://web.archive.org/web/20140724050708/http://www.coyotos.org/pipermail/coyotos-dev/2009-April/001867.html">"Status of Coyotos"</a>. <i>coyotos-dev</i> (Mailing list). Archived from <a rel="nofollow" class="external text" href="http://www.coyotos.org/pipermail/coyotos-dev/2009-April/001867.html">the original</a> on July 24, 2014<span class="reference-accessdate">. Retrieved <span class="nowrap">16 March</span> 2022</span>. <q>Active work on Coyotos stopped several months ago, and is unlikely to resume.</q></cite></span>

</li>

<li id="cite_note-5"><span class="mw-cite-backlink"><b><a href="#cite_ref-5">^</a></b></span> <span class="reference-text"><cite id="CITEREFShapiroVanderburghNorthupChizmadia2004" class="citation conference cs1">Shapiro, Jonathan S.; Vanderburgh, John; Northup, Eric; Chizmadia, David (2004). <a rel="nofollow" class="external text" href="https://www.usenix.org/legacy/publications/library/proceedings/sec04/tech/full_papers/shapiro/shapiro.pdf"><i>Design of the EROS Trusted Window System</i></a> <span class="cs1-format">(PDF)</span>. 13th USENIX Security Symposium. San Diego, CA, USA.</cite></span>

</li>

<li id="cite_note-6"><span class="mw-cite-backlink"><b><a href="#cite_ref-6">^</a></b></span> <span class="reference-text"><cite id="CITEREFSinhaSaratShapiro2004" class="citation conference cs1">Sinha, Anshumal; Sarat, Sandeep; Shapiro, Jonathan S. (2004). <a rel="nofollow" class="external text" href="https://www.usenix.org/legacy/publications/library/proceedings/usenix04/tech/general/full_papers/sinha/sinha.pdf"><i>Network Subsystems Reloaded: A High-Performance, Defensible Network Subsystem</i></a> <span class="cs1-format">(PDF)</span>. 2004 USENIX Annual Technical Conference. Boston, MA, USA.</cite></span>

</li>

<li id="cite_note-7"><span class="mw-cite-backlink"><b><a href="#cite_ref-7">^</a></b></span> <span class="reference-text"><cite id="CITEREFChenShapiro" class="citation web cs1">Chen, Hao; Shapiro, Jonathan S. <a rel="nofollow" class="external text" href="https://web.archive.org/web/20160303194224/http://www.eros-os.org/papers/ccs04.pdf">"Using Build-Integrated Static Checking to Preserve Correctness Invariants"</a> <span class="cs1-format">(PDF)</span>. Archived from <a rel="nofollow" class="external text" href="http://www.eros-os.org/papers/ccs04.pdf">the original</a> <span class="cs1-format">(PDF)</span> on March 3, 2016.</cite></span>

</li>

<li id="cite_note-8"><span class="mw-cite-backlink"><b><a href="#cite_ref-8">^</a></b></span> <span class="reference-text"><cite id="CITEREFShapiro2003" class="citation conference cs1">Shapiro, Jonathan S. (2003). <a rel="nofollow" class="external text" href="https://srl.cs.jhu.edu/courses/600.439/shap03vulnerabilities.pdf"><i>Vulnerabilities in Synchronous IPC Designs</i></a> <span class="cs1-format">(PDF)</span>. 2003 Symposium on Security and Privacy. Berkeley, CA, USA. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<a rel="nofollow" class="external text" href="https://doi.org/10.1109%2FSECPRI.2003.1199341">10.1109/SECPRI.2003.1199341</a>.</cite></span>

</li>

<li id="cite_note-9"><span class="mw-cite-backlink"><b><a href="#cite_ref-9">^</a></b></span> <span class="reference-text"><cite id="CITEREFChakraborty2010" class="citation journal cs1">Chakraborty, Pinaki (2010). "Research purpose operating systems – a wide survey". <i>GESJ: Computer Science and Telecommunications</i>. <b>3</b> (26). <a href="ISSN_(identifier)" class="mw-redirect" title="ISSN (identifier)">ISSN</a> <a rel="nofollow" class="external text" href="https://search.worldcat.org/issn/1512-1232">1512-1232</a>.</cite></span>

</li>

</ol></div></div>

<div class="mw-heading mw-heading3"><h3 id="Journals">Journals</h3></div>

<ol><li><span id="Lipton"><cite id="CITEREFLiptonSnyder1977" class="citation journal cs1">Lipton, R. J.; Snyder, L. (July 1977). <a rel="nofollow" class="external text" href="https://doi.org/10.1145%2F322017.322025">"A Linear Time Algorithm for Deciding Subject Security"</a>. <i>Journal of the ACM</i>. <b>24</b> (3): <span class="nowrap">455–</span>464. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<span class="id-lock-free" title="Freely accessible"><a rel="nofollow" class="external text" href="https://doi.org/10.1145%2F322017.322025">10.1145/322017.322025</a></span>. <a href="S2CID_(identifier)" class="mw-redirect" title="S2CID (identifier)">S2CID</a> <a rel="nofollow" class="external text" href="https://api.semanticscholar.org/CorpusID:291367">291367</a>.</cite></span></li>

<li><span id="HRU"><cite id="CITEREFHarrisonRuzzoUllman1976" class="citation journal cs1"><a href="Michael_A._Harrison" title="Michael A. Harrison">Harrison, Michael A.</a>; Ruzzo, W. L.; <a href="Jeffrey_Ullman" title="Jeffrey Ullman">Ullman, Jeffrey D.</a> (August 1976). <a rel="nofollow" class="external text" href="https://doi.org/10.1145%2F360303.360333">"Protection in Operating Systems"</a>. <i>Communications of the ACM</i>. <b>19</b> (8): <span class="nowrap">461–</span>471. <a href="Doi_(identifier)" class="mw-redirect" title="Doi (identifier)">doi</a>:<span class="id-lock-free" title="Freely accessible"><a rel="nofollow" class="external text" href="https://doi.org/10.1145%2F360303.360333">10.1145/360303.360333</a></span>. <a href="S2CID_(identifier)" class="mw-redirect" title="S2CID (identifier)">S2CID</a> <a rel="nofollow" class="external text" href="https://api.semanticscholar.org/CorpusID:5900205">5900205</a>.</cite></span></li></ol>

<div class="mw-heading mw-heading2"><h2 id="External_links">External links</h2></div>

<ul><li><a rel="nofollow" class="external text" href="https://web.archive.org/web/20160304064914/http://www.eros-os.org/eros.html">EROS home page</a> at the <a href="Wayback_Machine" title="Wayback Machine">Wayback Machine</a> (archived March 4, 2016)</li></ul>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Object-capability_security187" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Object-capability_security187" style="font-size:114%;margin:0 4em"><a href="Object-capability_model" title="Object-capability model">Object-capability</a> security</div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">Concepts</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Principle_of_least_privilege" title="Principle of least privilege">Principle of least privilege</a> (PoLP)</li>

<li><a href="Confused_deputy_problem" title="Confused deputy problem">Confused deputy problem</a></li>

<li><a href="Ambient_authority" title="Ambient authority">Ambient authority</a></li>

<li><a href="File_descriptor" title="File descriptor">File descriptor</a></li>

<li><a href="Object-capability_model" title="Object-capability model">Object-capability model</a></li>

<li><a href="Capability-based_security" title="Capability-based security">Capability-based security</a></li>

<li><a href="Capability-based_addressing" title="Capability-based addressing">Capability-based addressing</a></li>

<li><a href="Zooko's_triangle" title="Zooko's triangle">Zooko's triangle</a></li>

<li><a href="Petname" title="Petname">Petnames</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Operating_system" title="Operating system">Operating systems</a>,<br><a href="Kernel_(operating_system)" title="Kernel (operating system)">kernels</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Capsicum_(Unix)" title="Capsicum (Unix)">Capsicum</a></li>

<li><a href="Fuchsia_(operating_system)" title="Fuchsia (operating system)">Fuchsia</a></li>

<li><a href="Genode" title="Genode">Genode</a></li>

<li><a href="GNOSIS" title="GNOSIS">GNOSIS</a> → <a href="KeyKOS" title="KeyKOS">KeyKOS</a> → → CapROS</li>

<li><a href="Hydra_(operating_system)" title="Hydra (operating system)">Hydra</a></li>

<li><a href="Midori_(operating_system)" title="Midori (operating system)">Midori</a></li>

<li><a href="NLTSS" title="NLTSS">NLTSS</a></li>

<li><a href="HarmonyOS" title="HarmonyOS">HarmonyOS</a> (<a href="HarmonyOS_NEXT" title="HarmonyOS NEXT">HarmonyOS NEXT</a>)</li>

<li><a href="Phantom_OS" title="Phantom OS">Phantom OS</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Programming_language" title="Programming language">Programming languages</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Caja_project" title="Caja project">Caja–Cajita</a></li>

<li><a href="Joule_(programming_language)" title="Joule (programming language)">Joule</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="File_system" title="File system">File systems</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Tahoe-LAFS" title="Tahoe-LAFS">Tahoe-LAFS</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Specialised hardware</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="CAP_computer" title="CAP computer">Cambridge CAP</a></li>

<li><a href="IBM_System/38" title="IBM System/38">IBM System/38</a></li>

<li><a href="Intel_iAPX_432" title="Intel iAPX 432">Intel iAPX 432</a></li>

<li><a href="Plessey_System_250" title="Plessey System 250">Plessey System 250</a></li>

<li><a href="Capability_Hardware_Enhanced_RISC_Instructions" title="Capability Hardware Enhanced RISC Instructions">CHERI</a></li></ul>

</div></td></tr></tbody></table></div>

<div class="navbox-styles"></div><div role="navigation" class="navbox" aria-labelledby="Real-time_operating_systems_(RTOS)556" style="padding:3px"><table class="nowraplinks hlist mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Real-time_operating_systems_(RTOS)556" style="font-size:114%;margin:0 4em"><a href="Real-time_operating_system" title="Real-time operating system">Real-time operating systems</a> (RTOS)</div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Operating_system" title="Operating system">Operating<br>systems</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="POSIX" title="POSIX">POSIX</a> support</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Unix-like" title="Unix-like">Unix-like</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Junos_OS" title="Junos OS">Junos OS</a></li>

<li><a href="LynxOS" title="LynxOS">LynxOS</a></li>

<li><i><a href="Multi-Environment_Real-Time" title="Multi-Environment Real-Time">Multi-Environment Real-Time</a></i>^ (<i>MERT</i> – <i>Unix-RT</i>)</li>

<li><a href="Real-Time_Linux" class="mw-redirect" title="Real-Time Linux">Real-Time Linux</a>°</li>

<li><a href="RTLinux" title="RTLinux">RTLinux</a>°</li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="LiteOS" title="LiteOS">LiteOS</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="LiteOS" title="LiteOS">LiteOS</a></i>°</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Partial</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="ChorusOS" title="ChorusOS">ChorusOS</a></i>^</li>

<li><a href="Integrity_(operating_system)" title="Integrity (operating system)">Integrity</a>^</li>

<li><a href="Nucleus_RTOS" title="Nucleus RTOS">Nucleus RTOS</a>^</li>

<li><a href="NuttX" title="NuttX">NuttX</a>^°</li>

<li><a href="Operating_System_Embedded" class="mw-redirect" title="Operating System Embedded">Operating System Embedded</a>^ (OSE)</li>

<li><a href="RTEMS" title="RTEMS">RTEMS</a>°</li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="TRON_project" title="TRON project">TRON</a> support</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><td colspan="2" class="navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="ITRON_project" title="ITRON project">ITRON project</a></li>

<li><a href="T-Kernel" title="T-Kernel">T-Kernel</a>

<ul><li><a href="Micro_T-Kernel" title="Micro T-Kernel">Micro T-Kernel</a></li>

<li><a href="T-Engine_Forum" title="T-Engine Forum">T-Engine Forum</a> (organization)</li>

<li><a href="T-License" title="T-License">T-License</a></li></ul></li></ul>

<li><i><a href="RTEMS" title="RTEMS">RTEMS</a>°</i></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Capability-based_security" title="Capability-based security">Capability-based</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Java_virtual_machine" title="Java virtual machine">Java virtual machine</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="JavaOS#Chorus/Jazz" title="JavaOS">Chorus/Jazz</a></i>^ (<i><a href="JavaOS" title="JavaOS">JavaOS</a></i> + <i><a href="ChorusOS" title="ChorusOS">ChorusOS</a></i>^)</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="DOS" title="DOS">DOS</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="Multiuser_DOS" title="Multiuser DOS">Multiuser DOS</a></i>

<ul><li><i><a href="Concurrent_DOS" class="mw-redirect" title="Concurrent DOS">Concurrent DOS</a></i></li>

<li><i><a href="FlexOS" title="FlexOS">FlexOS</a></i></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="L4_microkernel_family" title="L4 microkernel family">L4</a> kernel</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="L4Linux" title="L4Linux">L<sup>4</sup>Linux</a>^°</li>

<li><a href="PikeOS" title="PikeOS">PikeOS</a>^</li>

<li><a href="Wombat_(operating_system)" title="Wombat (operating system)">Wombat</a>^°</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Psion_(company)" title="Psion (company)">Psion</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="EKA2" title="EKA2">EKA2</a></i>^° kernel → <i><a href="Symbian" title="Symbian">Symbian</a> OS</i>^°</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Microsoft" title="Microsoft">Microsoft</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="ThreadX" title="ThreadX">ThreadX</a>^</li>

<li><a href="Windows_Embedded_Compact" class="mw-redirect" title="Windows Embedded Compact">Windows Embedded Compact</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="IBM" title="IBM">IBM</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Transaction_Processing_Facility" title="Transaction Processing Facility">Transaction Processing Facility</a> (TPF)</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Texas_Instruments" title="Texas Instruments">Texas Instruments</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="TI-RTOS#RTOS_kernel_overview" title="TI-RTOS">TI-RTOS Kernel</a>^°</li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Digital_Equipment_Corporation" title="Digital Equipment Corporation">DEC</a> <a href="PDP-11" title="PDP-11">PDP-11</a> & <a href="VAX" title="VAX">VAX</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><i><a href="VAXELN" title="VAXELN">VAXELN</a></i></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Low resource</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="ChibiOS/RT" title="ChibiOS/RT">ChibiOS/RT</a>^°</li>

<li><a href="Contiki" title="Contiki">Contiki</a>°</li>

<li><a href="ERIKA_Enterprise" title="ERIKA Enterprise">ERIKA Enterprise</a>°</li>

<li>FunkOS°</li>

<li><a href="Apache_Mynewt" title="Apache Mynewt">Mynewt</a>°</li>

<li><a href="OpenComRTOS" title="OpenComRTOS">OpenComRTOS</a>^</li>

<li><a href="RT-Thread" title="RT-Thread">RT-Thread</a>° Nano</li>

<li><a href="RTEMS" title="RTEMS">RTEMS</a>°</li>

<li><a href="ThreadX" title="ThreadX">ThreadX</a>^</li>

<li><a href="Zephyr_(operating_system)" title="Zephyr (operating system)">Zephyr</a>^°</li></ul>

</div></td></tr></tbody></table><div>

<ul><li><i><a href="BeRTOS" title="BeRTOS">BeRTOS</a></i>^°</li>

<li><i><a href="DioneOS" title="DioneOS">DioneOS</a></i></li>

<li><a href="Segger_Microcontroller_Systems" title="Segger Microcontroller Systems">embOS</a></li>

<li><a href="FreeRTOS" title="FreeRTOS">FreeRTOS</a>^°</li>

<li><a href="Green_Hills_Software#Real-time_operating_systems" title="Green Hills Software">µ-velOSity</a>^</li>

<li><a href="OS-9" title="OS-9">OS-9</a> (<a href="Microware" title="Microware">Microware</a>)</li>

<li><a href="Phantom_OS" title="Phantom OS">Phantom OS</a>^°</li>

<li><a href="RT-Thread" title="RT-Thread">RT-Thread</a>° Standard</li>

<li><a href="ScreenOS" title="ScreenOS">ScreenOS</a></li>

<li><i><a href="Sintran_III" title="Sintran III">Sintran III</a></i></li>

<li><i><a href="THEOS" title="THEOS">THEOS</a></i></li>

<li><i><a href="Thoth_(operating_system)" title="Thoth (operating system)">Thoth</a></i>^ → <i><a href="Harmony_(operating_system)" title="Harmony (operating system)">Harmony</a></i>^</li>

<li><a href="VxWorks" title="VxWorks">VxWorks</a></li>

<li><a href="EulerOS" title="EulerOS">UniProton</a></li></ul></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Software_framework" title="Software framework">Frameworks</a>, <a href="Software_development_kit" title="Software development kit">kits</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Robot_Operating_System" title="Robot Operating System">Robot Operating System</a>° 2</li>

<li><a href="Xenomai" title="Xenomai">Xenomai</a>°</li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Programmer" title="Programmer">Developers</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Gordon_Bell_(QNX)" title="Gordon Bell (QNX)">Gordon Bell</a></li>

<li><a href="David_Cheriton" title="David Cheriton">David Cheriton</a></li>

<li><a href="Dave_Cutler" title="Dave Cutler">Dave Cutler</a></li>

<li><a href="Dan_Dodge" title="Dan Dodge">Dan Dodge</a></li>

<li><a href="Adam_Dunkels" title="Adam Dunkels">Adam Dunkels</a></li>

<li><a href="Ken_Sakamura" title="Ken Sakamura">Ken Sakamura</a></li></ul>

</div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div>

<ul><li><i>Italics</i> <b>= discontinued</b></li>

<li><b>^ = <a href="Microkernel" title="Microkernel">Microkernel</a></b></li>

<li><b>° = <a href="Open-source_software" title="Open-source software">Open-source software</a></b><br><span class="noviewer" typeof="mw:File"><span title="List-Class article"></span></span> <b><a href="Comparison_of_real-time_operating_systems" title="Comparison of real-time operating systems">Comparison</a></b> <span class="noviewer" typeof="mw:File"><span title="Category"></span></span> <b>Category</b></li></ul>

</div></td></tr></tbody></table></div>

<div class="navbox-styles"></div><div role="navigation" class="navbox" aria-labelledby="Microkernels-nanokernels667" style="padding:3px"><table class="nowraplinks hlist mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><div id="Microkernels-nanokernels667" style="font-size:114%;margin:0 4em"><a href="Microkernel" title="Microkernel">Microkernels</a>-<a href="Microkernel#Nanokernel" title="Microkernel">nanokernels</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Kernel_(operating_system)" title="Kernel (operating system)">Kernels</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="L4_microkernel_family" title="L4 microkernel family">L4</a> family</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="Eumel" title="Eumel">Eumel</a></i> → <i><a href="L3_microkernel" class="mw-redirect" title="L3 microkernel">L3</a></i> → <a href="L4_microkernel_family" title="L4 microkernel family">L4</a>°</li>

<ul><li><i><a href="Mac_OS_nanokernel" title="Mac OS nanokernel">Mac OS nanokernel</a></i></li>

<li><i><a href="NuKernel" class="mw-redirect" title="NuKernel">NuKernel</a></i></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Psion_(company)" title="Psion (company)">Psion</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Amiga" title="Amiga">Amiga</a>-type</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Exec_(Amiga)#ExecSG" title="Exec (Amiga)">ExecSG</a></li></ul></li>

<li><a href="Quark_(kernel)" title="Quark (kernel)">Quark</a></li>

<li><i><a href="WarpOS" title="WarpOS">WarpOS</a></i></li></ul>

</div></td></tr></tbody></table><div>

<ul><li><i><a href="Adaptive_Domain_Environment_for_Operating_Systems" title="Adaptive Domain Environment for Operating Systems">ADEOS</a></i>°</li>

<li>Little Kernel</li>

<li><i><a href="Mach_(kernel)" title="Mach (kernel)">Mach</a></i>°

<li><i><a href="MicroEmpix" title="MicroEmpix">MicroEmpix</a></i></li>

<li><a href="Green_Hills_Software#Real-time_operating_systems" title="Green Hills Software">µ-velOSity</a>^</li>

<li><i><a href="Spring_(operating_system)#The_nucleus" title="Spring (operating system)">nucleus</a></i></li>

<li><i><a href="PowerUP_(accelerator)#PowerUP_software" title="PowerUP (accelerator)">PowerUP</a></i></li>

<li><a href="RTLinux" title="RTLinux">RTLinux</a>°</li>

<li><a href="TI-RTOS#RTOS_kernel_overview" title="TI-RTOS">TI-RTOS kernel</a>^°</li>

<li><i><a href="Vanguard_(microkernel)" title="Vanguard (microkernel)">Vanguard</a></i></li></ul></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Operating_system" title="Operating system">Operating<br>systems</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="POSIX" title="POSIX">POSIX</a> support</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Unix-like" title="Unix-like">Unix-like</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><i><a href="Lites" title="Lites">Lites</a></i></li>

<li><i><a href="Meiko_Scientific#MeikOS" title="Meiko Scientific">MeikOS</a></i></li>

<li><a href="Minix" title="Minix">Minix</a>°

<ul><li><a href="Minix-vmd" class="mw-redirect" title="Minix-vmd">Minix-vmd</a>°</li>

<li><a href="Minix_3" title="Minix 3">Minix 3</a>°</li></ul></li>

<li><i><a href="MkLinux" title="MkLinux">MkLinux</a></i>°</li>

<li><i><a href="Multi-Environment_Real-Time" title="Multi-Environment Real-Time">Multi-Environment Real-Time</a></i>^ (<i>MERT</i> – <i>Unix-RT</i>)</li>

<li><a href="Redox_(operating_system)" class="mw-redirect" title="Redox (operating system)">Redox</a>°</li>

<li><i><a href="Spring_(operating_system)" title="Spring (operating system)">Spring</a></i></li>

<li><a href="Tinix" title="Tinix">Tinix</a></li>

<li><i><a href="UNICOS" title="UNICOS">UNICOS</a></i></li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Partial</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="ChorusOS" title="ChorusOS">ChorusOS</a>^</i></li>

<li><a href="Integrity_(operating_system)" title="Integrity (operating system)">Integrity</a>^</li>

<li><a href="Nucleus_RTOS" title="Nucleus RTOS">Nucleus RTOS</a>^</li>

<li><a href="NuttX" title="NuttX">NuttX</a>^°</li>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Capability-based_security" title="Capability-based security">Capability-based</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="GNOSIS" title="GNOSIS">GNOSIS</a></i> → <i><a href="KeyKOS" title="KeyKOS">KeyKOS</a></i> → <i></i> → CapROS</li>

<li><i><a href="Hydra_(operating_system)" title="Hydra (operating system)">Hydra</a></i></li>

<li><i><a href="Midori_(operating_system)" title="Midori (operating system)">Midori</a></i></li>

<li><i><a href="NLTSS" title="NLTSS">NLTSS</a></i></li>

<li><i><a href="HarmonyOS_NEXT" title="HarmonyOS NEXT">HarmonyOS NEXT</a> (<a href="OpenHarmony" title="OpenHarmony">OpenHarmony</a>, <a href="OpenHarmony#Oniro_OS" title="OpenHarmony">Oniro OS</a>)</i> → <i><a href="HarmonyOS" title="HarmonyOS">HarmonyOS</a></i></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="L4_microkernel_family" title="L4 microkernel family">L4</a> kernel</th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="L4Linux" title="L4Linux">L<sup>4</sup>Linux</a>^°</li>

<li><a href="PikeOS" title="PikeOS">PikeOS</a>^</li>

<li><a href="Wombat_(operating_system)" title="Wombat (operating system)">Wombat</a>^°</li></ul>

<ul><li><i><a href="JavaOS" title="JavaOS">JavaOS</a></i> (<i><a href="JavaOS#Chorus/Jazz" title="JavaOS">Chorus/Jazz</a></i>^ integrates <i><a href="ChorusOS" title="ChorusOS">ChorusOS</a></i>^)</li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Macintosh" class="mw-redirect" title="Macintosh">Macintosh</a> hosted</th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th id="Unix-like13" scope="row" class="navbox-group" style="width:1%"><a href="Unix-like" title="Unix-like">Unix-like</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i><a href="MachTen" title="MachTen">MachTen</a></i></li>

<li><i><a href="MacMach" title="MacMach">MacMach</a></i></li></ul>

</div></td></tr></tbody></table><div>

<ul><li><i><a href="Copland_(operating_system)" title="Copland (operating system)">Copland</a></i></li>

<li><i><a href="Mac_OS_8#Mac_OS_8.6" title="Mac OS 8">Classic Mac OS</a></i> (<a href="PowerPC" title="PowerPC">PowerPC</a> kernel)</li></ul></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Psion_(company)" title="Psion (company)">Psion</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><i><a href="EPOC_(operating_system)" title="EPOC (operating system)">EPOC</a></i> → <i><a href="Symbian" title="Symbian">Symbian</a> OS</i>^°</li>

<ul><li><a href="AmigaOS" title="AmigaOS">AmigaOS</a></li>

<li><a href="AROS_Research_Operating_System" title="AROS Research Operating System">AROS</a>°

<ul><li><a href="AROS_Research_Operating_System#AspireOS" title="AROS Research Operating System">AspireOS</a>°</li>

<li><a href="AROS_Research_Operating_System#Broadway" title="AROS Research Operating System">Broadway</a>°</li>

<li><a href="AROS_Research_Operating_System#Icaros_Desktop" title="AROS Research Operating System">Icaros Desktop</a>°</li></ul></li>

<li><a href="MorphOS" title="MorphOS">MorphOS</a></li></ul>

<ul><li><a href="Singularity_(operating_system)" title="Singularity (operating system)">Singularity</a></li>

<li><a href="ThreadX" title="ThreadX">ThreadX</a>^°</li>

<li><i><a href="Verve_(operating_system)" title="Verve (operating system)">Verve</a></i></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="AIM_alliance" title="AIM alliance">AIM alliance</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><i>Pink</i> → <i><a href="Taligent" title="Taligent">Taligent</a> OS</i> → <i><a href="Workplace_OS" title="Workplace OS">Workplace OS</a></i></li></ul>

</div></td></tr></tbody></table><div>

<ul><li><i><a href="Amoeba_(operating_system)" title="Amoeba (operating system)">Amoeba</a></i>°</li>

<li><i><a href="BeRTOS" title="BeRTOS">BeRTOS</a></i>^°</li>

<li><a href="ChibiOS/RT" title="ChibiOS/RT">ChibiOS/RT</a>^°</li>

<li><a href="FreeRTOS" title="FreeRTOS">FreeRTOS</a>^°</li>

<li><a href="HelenOS" title="HelenOS">HelenOS</a>°</li>

<li><a href="OpenComRTOS" title="OpenComRTOS">OpenComRTOS</a>^</li>

<li><a href="Phantom_OS" title="Phantom OS">Phantom OS</a>^°</li>

<li><a href="SharpOS" title="SharpOS">SharpOS</a>°</li>

<li><i><a href="Thoth_(operating_system)" title="Thoth (operating system)">Thoth</a></i>^ → <i><a href="Harmony_(operating_system)" title="Harmony (operating system)">Harmony</a></i>^ → <i><a href="V_(operating_system)" title="V (operating system)">V</a></i></li>

<li><a href="Versatile_Real-Time_Executive" title="Versatile Real-Time Executive">VRTX</a>^</li></ul></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Software_framework" title="Software framework">Frameworks</a>, <a href="Software_development_kit" title="Software development kit">kits</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Cosmos_(operating_system)" title="Cosmos (operating system)">Cosmos</a>°</li>

<li><a href="Genode" title="Genode">Genode</a>°</li>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Programmer" title="Programmer">Developers</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Gordon_Bell_(QNX)" title="Gordon Bell (QNX)">Gordon Bell</a></li>

<li><a href="Thomas_Bushnell" title="Thomas Bushnell">Thomas Bushnell</a></li>

<li><a href="David_Cheriton" title="David Cheriton">David Cheriton</a></li>

<li><a href="Dan_Dodge" title="Dan Dodge">Dan Dodge</a></li>

<li><a href="Per_Brinch_Hansen" title="Per Brinch Hansen">Per Brinch Hansen</a></li>

<li><a href="Gernot_Heiser" title="Gernot Heiser">Gernot Heiser</a></li>

<li><a href="Jochen_Liedtke" title="Jochen Liedtke">Jochen Liedtke</a></li>

<li><a href="James_G._Mitchell" title="James G. Mitchell">James G. Mitchell</a></li>

<li><a href="Ike_Nassi" title="Ike Nassi">Ike Nassi</a></li>

<li><a href="Richard_Rashid" title="Richard Rashid">Richard Rashid</a></li>

<li><a href="Andrew_S._Tanenbaum" title="Andrew S. Tanenbaum">Andrew S. Tanenbaum</a></li>

<li><a href="Avie_Tevanian" title="Avie Tevanian">Avie Tevanian</a></li>

<li><a href="William_Wulf" title="William Wulf">William Wulf</a></li></ul>

</div></td></tr><tr><td class="navbox-abovebelow" colspan="2"><div>

<ul><li><i>Italics</i> <b>= discontinued</b></li>

<li><b>° = <a href="Open-source_software" title="Open-source software">Open-source software</a></b><br><span class="noviewer" typeof="mw:File"><span title="Category"></span></span> <b>Category: Microkernel-based operating systems</b> <span class="noviewer" typeof="mw:File"><span title="Category"></span></span> <b>Category: Microkernels</b></li></ul>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2024-11-26" href="https://en.wikipedia.org/wiki/?title=EROS_(microkernel)&oldid=1259675217">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>