SherbyNet - /page/wikibook/entry.mu

Micron Document

<!DOCTYPE html>

<title>Separation kernel</title>

</head>

<span id="openzim-page-title" class="mw-page-title-main"><span class="mw-page-title-main">Separation kernel</span></span>

</h1>

</header>

<p>A <b>separation kernel</b> is a type of security <a href="Kernel_(computer_science)" class="mw-redirect" title="Kernel (computer science)">kernel</a> used to simulate a distributed environment. The concept was introduced by <a href="John_Rushby" title="John Rushby">John Rushby</a> in a 1981 paper.<sup id="cite_ref-Rushby_1-0" class="reference"><a href="#cite_note-Rushby-1"><span class="cite-bracket">[</span>1<span class="cite-bracket">]</span></a></sup> Rushby proposed the separation kernel as a solution to the difficulties and problems that had arisen in the development and verification of large, complex security kernels that were intended to "provide multilevel secure operation on general-purpose multi-user systems." According to Rushby, "the task of a separation kernel is to create an environment which is indistinguishable from that provided by a physically distributed system: it must appear as if each regime is a separate, isolated machine and that information can only flow from one machine to another along known external communication lines. One of the properties we must prove of a separation kernel, therefore, is that there are no channels for information flow between regimes other than those explicitly provided."

</p><p>A variant of the separation kernel, the partitioning kernel, has gained acceptance in the commercial aviation community as a way of consolidating multiple functions onto a single processor, perhaps of <a href="Mixed_criticality" title="Mixed criticality">mixed criticality</a>. Commercial <a href="Real-time_operating_system" title="Real-time operating system">real-time operating system</a> products in this genre have been used by <a href="Aerospace_manufacturer" title="Aerospace manufacturer">aircraft manufacturers</a> for safety-critical avionics applications.

</p><p>In 2007 the Information Assurance Directorate of the U.S. <a href="National_Security_Agency" title="National Security Agency">National Security Agency</a> (NSA) published the Separation Kernel Protection Profile (SKPP),<sup id="cite_ref-NSA_2-0" class="reference"><a href="#cite_note-NSA-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup> a security requirements specification for separation kernels suitable to be used in the most hostile threat environments. The SKPP describes, in <a href="Common_Criteria" title="Common Criteria">Common Criteria</a><sup id="cite_ref-3" class="reference"><a href="#cite_note-3"><span class="cite-bracket">[</span>3<span class="cite-bracket">]</span></a></sup> parlance, a class of modern products that provide the foundational properties of Rushby's conceptual separation kernel. It defines the security functional and assurance requirements for the construction and evaluation of separation kernels while yet providing some latitude in the choices available to developers.

</p><p>The SKPP defines separation kernel as "hardware and/or firmware and/or software mechanisms whose primary function is to establish, isolate and separate multiple partitions and control information flow between the subjects and exported resources allocated to those partitions." Further, the separation kernel's core functional requirements include:

</p>

<ul><li>Protection of all resources (including <a href="Central_processing_unit" title="Central processing unit">CPU</a>, memory and devices) from unauthorized access.</li>

<li>Separation of internal resources used by the Target of Evaluation Security Functions (TSF) from exported resources made available to subjects.</li>

<li>Partitioning and isolation of exported resources.</li>

<li>Mediation of information flows between partitions and between exported resources.</li>

<li>Audit services.</li></ul>

<blockquote><p>The separation kernel allocates all exported resources under its control into partitions. The partitions are isolated except for explicitly allowed information flows. The actions of a subject in one partition are isolated from (viz., cannot be detected by or communicated to) subjects in another partition, unless that flow has been allowed. The partitions and flows are defined in configuration data. Note that 'partition' and 'subject' are orthogonal abstractions. 'Partition,' as indicated by its mathematical genesis, provides for a set-theoretic grouping of system entities, whereas 'subject' allows us to reason about the individual active entities of a system. Thus, a partition (a collection, containing zero or more elements) is not a subject (an active element), but may contain zero or more subjects.<sup id="cite_ref-NSA_2-1" class="reference"><a href="#cite_note-NSA-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup>

The separation kernel provides to its hosted software programs high-assurance partitioning and information flow control properties that are both tamperproof and non-bypassable. These capabilities provide a configurable trusted foundation for a variety of system architectures.<sup id="cite_ref-NSA_2-2" class="reference"><a href="#cite_note-NSA-2"><span class="cite-bracket">[</span>2<span class="cite-bracket">]</span></a></sup></p></blockquote>

<div class="mw-heading mw-heading2"><h2 id="Solutions">Solutions</h2></div>

<ul><li><a href="PikeOS" title="PikeOS">PikeOS</a> combines separation kernel hypervisor technology with hard real-time capabilities.</li>

<li><a href="Integrity_(operating_system)#INTEGRITY-178B" title="Integrity (operating system)">INTEGRITY-178B</a> from <a href="Green_Hills_Software" title="Green Hills Software">Green Hills Software</a> In September 2008 it became the first separation kernel certified against the SKPP.<sup id="cite_ref-4" class="reference"><a href="#cite_note-4"><span class="cite-bracket">[</span>4<span class="cite-bracket">]</span></a></sup></li>

<li><a href="Wind_River_Systems" title="Wind River Systems">Wind River Systems</a> has separation kernel technology that was in active certification process in 2009.</li>

<li><a href="Lynx_Software_Technologies" title="Lynx Software Technologies">Lynx Software Technologies</a> has a separation kernel, <a href="LynxSecure" title="LynxSecure">LynxSecure</a>.</li></ul>

<p>In 2011, the Information Assurance Directorate sunset the SKPP. NSA will no longer certify specific operating systems, including separation kernels against the SKPP, noting "conformance to this protection profile, by itself, does not offer sufficient confidence that national security information is appropriately protected in the context of a larger system in which the conformant product is integrated".<sup id="cite_ref-5" class="reference"><a href="#cite_note-5"><span class="cite-bracket">[</span>5<span class="cite-bracket">]</span></a></sup>

</p><p>The <a href="SeL4" class="mw-redirect" title="SeL4">seL4 microkernel</a> has a formal proof of concept that it can be configured as a separation kernel.<sup id="cite_ref-6" class="reference"><a href="#cite_note-6"><span class="cite-bracket">[</span>6<span class="cite-bracket">]</span></a></sup> The enforced continuance of information<sup id="cite_ref-7" class="reference"><a href="#cite_note-7"><span class="cite-bracket">[</span>7<span class="cite-bracket">]</span></a></sup> along with this implies it is an elevated level example of assurance. The Muen<sup id="cite_ref-8" class="reference"><a href="#cite_note-8"><span class="cite-bracket">[</span>8<span class="cite-bracket">]</span></a></sup> separation kernel is also a formally verified open source separation kernel for x86 machines.

</p>

<ul><li>For a computer security architecture based on a separation kernel see <a href="Multiple_Independent_Levels_of_Security" title="Multiple Independent Levels of Security">Multiple Independent Levels of Security</a>.</li>

<li><a href="Chroot" title="Chroot">Chroot</a></li>

<li><a href="FreeBSD_jail" title="FreeBSD jail">FreeBSD jail</a></li>

<li><a href="Operating-system-level_virtualization" class="mw-redirect" title="Operating-system-level virtualization">Operating-system-level virtualization</a></li></ul>

<div class="mw-heading mw-heading2"><h2 id="References">References</h2></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .reflist{margin-bottom:0.5em;list-style-type:decimal}@media screen{.mw-parser-output .reflist{font-size:90%}}.mw-parser-output .reflist .references{font-size:100%;margin-bottom:0;list-style-type:inherit}.mw-parser-output .reflist-columns-2{column-width:30em}.mw-parser-output .reflist-columns-3{column-width:25em}.mw-parser-output .reflist-columns{margin-top:0.3em}.mw-parser-output .reflist-columns ol{margin-top:0}.mw-parser-output .reflist-columns li{page-break-inside:avoid;break-inside:avoid-column}.mw-parser-output .reflist-upper-alpha{list-style-type:upper-alpha}.mw-parser-output .reflist-upper-roman{list-style-type:upper-roman}.mw-parser-output .reflist-lower-alpha{list-style-type:lower-alpha}.mw-parser-output .reflist-lower-greek{list-style-type:lower-greek}.mw-parser-output .reflist-lower-roman{list-style-type:lower-roman}

/* end https://en.wikipedia.org/ */

</style><div class="reflist">

<li id="cite_note-Rushby-1"><span class="mw-cite-backlink"><b><a href="#cite_ref-Rushby_1-0">^</a></b></span> <span class="reference-text">John Rushby, "The Design and Verification of Secure Systems," Eighth ACM Symposium on Operating System Principles, pp. 12-21, Asilomar, CA, December 1981. (<i>ACM Operating Systems Review</i>, Vol. 15, No. 5).</span>

</li>

<li id="cite_note-NSA-2"><span class="mw-cite-backlink">^ <a href="#cite_ref-NSA_2-0"><sup><i><b>a</b></i></sup></a> <a href="#cite_ref-NSA_2-1"><sup><i><b>b</b></i></sup></a> <a href="#cite_ref-NSA_2-2"><sup><i><b>c</b></i></sup></a></span> <span class="reference-text">Information Assurance Directorate, National Security Agency, Fort George G. Meade, MD. "U.S. Government Protection Profile for Separation Kernels in Environments Requiring High Robustness," Version 1.03, June 2007.</span>

</li>

<li id="cite_note-3"><span class="mw-cite-backlink"><b><a href="#cite_ref-3">^</a></b></span> <span class="reference-text">"Common Criteria for Information Technology Security Evaluation," Version 3.1, CCMB-2006-09-001, 002, 003, September 2006.</span>

</li>

/* start https://en.wikipedia.org/ */

.mw-parser-output cite.citation{font-style:inherit;word-wrap:break-word}.mw-parser-output .citation q{quotes:"\"""\"""'""'"}.mw-parser-output .citation:target{background-color:rgba(0,127,255,0.133)}.mw-parser-output .id-lock-free.id-lock-free a{background:url("./mw/Lock-green.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-limited.id-lock-limited a,.mw-parser-output .id-lock-registration.id-lock-registration a{background:url("./mw/Lock-gray-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .id-lock-subscription.id-lock-subscription a{background:url("./mw/Lock-red-alt-2.svg")right 0.1em center/9px no-repeat}.mw-parser-output .cs1-ws-icon a{background:url("./mw/Wikisource-logo.svg")right 0.1em center/12px no-repeat}body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-free a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-limited a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-registration a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .id-lock-subscription a,body:not(.skin-timeless):not(.skin-minerva) .mw-parser-output .cs1-ws-icon a{background-size:contain;padding:0 1em 0 0}.mw-parser-output .cs1-code{color:inherit;background:inherit;border:none;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;color:var(--color-error,#d33)}.mw-parser-output .cs1-visible-error{color:var(--color-error,#d33)}.mw-parser-output .cs1-maint{display:none;color:#085;margin-left:0.3em}.mw-parser-output .cs1-kern-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right{padding-right:0.2em}.mw-parser-output .citation .mw-selflink{font-weight:inherit}@media screen{.mw-parser-output .cs1-format{font-size:95%}html.skin-theme-clientpref-night .mw-parser-output .cs1-maint{color:#18911f}}@media screen and (prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .cs1-maint{color:#18911f}}

/* end https://en.wikipedia.org/ */

</style><cite class="citation web cs1"><a rel="nofollow" class="external text" href="http://www.niap-ccevs.org/cc-scheme/st/st_vid10119-st.pdf">"NIAP"</a> <span class="cs1-format">(PDF)</span>. <i>www.niap-ccevs.org</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2025-01-04</span></span>.</cite></span>

</li>

<li id="cite_note-5"><span class="mw-cite-backlink"><b><a href="#cite_ref-5">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://www.niap-ccevs.org/pp/archived/PP_SKPP_HR_V1.03/">"NIAP"</a>. <i>www.niap-ccevs.org</i><span class="reference-accessdate">. Retrieved <span class="nowrap">2025-01-04</span></span>.</cite></span>

</li>

<li id="cite_note-6"><span class="mw-cite-backlink"><b><a href="#cite_ref-6">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://github.com/seL4/l4v/blob/master/proof/bisim/Syscall_S.thy">"The L4.verified Proofs"</a>. <i><a href="GitHub" title="GitHub">GitHub</a></i>. 18 November 2021.</cite></span>

</li>

<li id="cite_note-7"><span class="mw-cite-backlink"><b><a href="#cite_ref-7">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20151222161957/https://www.nicta.com.au/publications/research-publications/?pid=6464">"seL4: from General Purpose to a Proof of Information Flow Enforcement"</a>. Archived from <a rel="nofollow" class="external text" href="https://www.nicta.com.au/publications/research-publications/?pid=6464">the original</a> on 2015-12-22<span class="reference-accessdate">. Retrieved <span class="nowrap">2015-12-20</span></span>.</cite></span>

</li>

<li id="cite_note-8"><span class="mw-cite-backlink"><b><a href="#cite_ref-8">^</a></b></span> <span class="reference-text"><cite class="citation web cs1"><a rel="nofollow" class="external text" href="https://web.archive.org/web/20180626035740/https://muen.sk/muen-report.pdf">"Muen - An x86/64 Separation Kernel for High Assurance"</a> <span class="cs1-format">(PDF)</span>. Archived from <a rel="nofollow" class="external text" href="https://muen.sk/muen-report.pdf">the original</a> <span class="cs1-format">(PDF)</span> on 2018-06-26.</cite></span>

</li>

</ol></div></div>

/* start https://en.wikipedia.org/ */

.mw-parser-output .hlist dl,.mw-parser-output .hlist ol,.mw-parser-output .hlist ul{margin:0;padding:0}.mw-parser-output .hlist dd,.mw-parser-output .hlist dt,.mw-parser-output .hlist li{margin:0;display:inline}.mw-parser-output .hlist.inline,.mw-parser-output .hlist.inline dl,.mw-parser-output .hlist.inline ol,.mw-parser-output .hlist.inline ul,.mw-parser-output .hlist dl dl,.mw-parser-output .hlist dl ol,.mw-parser-output .hlist dl ul,.mw-parser-output .hlist ol dl,.mw-parser-output .hlist ol ol,.mw-parser-output .hlist ol ul,.mw-parser-output .hlist ul dl,.mw-parser-output .hlist ul ol,.mw-parser-output .hlist ul ul{display:inline}.mw-parser-output .hlist .mw-empty-li{display:none}.mw-parser-output .hlist dt::after{content:": "}.mw-parser-output .hlist dd::after,.mw-parser-output .hlist li::after{content:" · ";font-weight:bold}.mw-parser-output .hlist dd:last-child::after,.mw-parser-output .hlist dt:last-child::after,.mw-parser-output .hlist li:last-child::after{content:none}.mw-parser-output .hlist dd dd:first-child::before,.mw-parser-output .hlist dd dt:first-child::before,.mw-parser-output .hlist dd li:first-child::before,.mw-parser-output .hlist dt dd:first-child::before,.mw-parser-output .hlist dt dt:first-child::before,.mw-parser-output .hlist dt li:first-child::before,.mw-parser-output .hlist li dd:first-child::before,.mw-parser-output .hlist li dt:first-child::before,.mw-parser-output .hlist li li:first-child::before{content:" (";font-weight:normal}.mw-parser-output .hlist dd dd:last-child::after,.mw-parser-output .hlist dd dt:last-child::after,.mw-parser-output .hlist dd li:last-child::after,.mw-parser-output .hlist dt dd:last-child::after,.mw-parser-output .hlist dt dt:last-child::after,.mw-parser-output .hlist dt li:last-child::after,.mw-parser-output .hlist li dd:last-child::after,.mw-parser-output .hlist li dt:last-child::after,.mw-parser-output .hlist li li:last-child::after{content:")";font-weight:normal}.mw-parser-output .hlist ol{counter-reset:listitem}.mw-parser-output .hlist ol>li{counter-increment:listitem}.mw-parser-output .hlist ol>li::before{content:" "counter(listitem)"\a0 "}.mw-parser-output .hlist dd ol>li:first-child::before,.mw-parser-output .hlist dt ol>li:first-child::before,.mw-parser-output .hlist li ol>li:first-child::before{content:" ("counter(listitem)"\a0 "}

/* end https://en.wikipedia.org/ */

</style><style data-mw-deduplicate="TemplateStyles:r1236075235">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbox{box-sizing:border-box;border:1px solid #a2a9b1;width:100%;clear:both;font-size:88%;text-align:center;padding:1px;margin:1em auto 0}.mw-parser-output .navbox .navbox{margin-top:0}.mw-parser-output .navbox+.navbox,.mw-parser-output .navbox+.navbox-styles+.navbox{margin-top:-1px}.mw-parser-output .navbox-inner,.mw-parser-output .navbox-subgroup{width:100%}.mw-parser-output .navbox-group,.mw-parser-output .navbox-title,.mw-parser-output .navbox-abovebelow{padding:0.25em 1em;line-height:1.5em;text-align:center}.mw-parser-output .navbox-group{white-space:nowrap;text-align:right}.mw-parser-output .navbox,.mw-parser-output .navbox-subgroup{background-color:#fdfdfd}.mw-parser-output .navbox-list{line-height:1.5em;border-color:#fdfdfd}.mw-parser-output .navbox-list-with-group{text-align:left;border-left-width:2px;border-left-style:solid}.mw-parser-output tr+tr>.navbox-abovebelow,.mw-parser-output tr+tr>.navbox-group,.mw-parser-output tr+tr>.navbox-image,.mw-parser-output tr+tr>.navbox-list{border-top:2px solid #fdfdfd}.mw-parser-output .navbox-title{background-color:#ccf}.mw-parser-output .navbox-abovebelow,.mw-parser-output .navbox-group,.mw-parser-output .navbox-subgroup .navbox-title{background-color:#ddf}.mw-parser-output .navbox-subgroup .navbox-group,.mw-parser-output .navbox-subgroup .navbox-abovebelow{background-color:#e6e6ff}.mw-parser-output .navbox-even{background-color:#f7f7f7}.mw-parser-output .navbox-odd{background-color:transparent}.mw-parser-output .navbox .hlist td dl,.mw-parser-output .navbox .hlist td ol,.mw-parser-output .navbox .hlist td ul,.mw-parser-output .navbox td.hlist dl,.mw-parser-output .navbox td.hlist ol,.mw-parser-output .navbox td.hlist ul{padding:0.125em 0}.mw-parser-output .navbox .navbar{display:block;font-size:100%}.mw-parser-output .navbox-title .navbar{float:left;text-align:left;margin-right:0.5em}body.skin--responsive .mw-parser-output .navbox-image img{max-width:none!important}@media print{body.ns-0 .mw-parser-output .navbox{display:none!important}}

/* end https://en.wikipedia.org/ */

</style></div><div role="navigation" class="navbox" aria-labelledby="Operating_systems310" style="padding:3px"><table class="nowraplinks mw-collapsible autocollapse navbox-inner" style="border-spacing:0;background:transparent;color:inherit"><tbody><tr><th scope="col" class="navbox-title" colspan="2"><style data-mw-deduplicate="TemplateStyles:r1239400231">

/* start https://en.wikipedia.org/ */

.mw-parser-output .navbar{display:inline;font-size:88%;font-weight:normal}.mw-parser-output .navbar-collapse{float:left;text-align:left}.mw-parser-output .navbar-boxtext{word-spacing:0}.mw-parser-output .navbar ul{display:inline-block;white-space:nowrap;line-height:inherit}.mw-parser-output .navbar-brackets::before{margin-right:-0.125em;content:"[ "}.mw-parser-output .navbar-brackets::after{margin-left:-0.125em;content:" ]"}.mw-parser-output .navbar li{word-spacing:-0.125em}.mw-parser-output .navbar a>span,.mw-parser-output .navbar a>abbr{text-decoration:inherit}.mw-parser-output .navbar-mini abbr{font-variant:small-caps;border-bottom:none;text-decoration:none;cursor:inherit}.mw-parser-output .navbar-ct-full{font-size:114%;margin:0 7em}.mw-parser-output .navbar-ct-mini{font-size:114%;margin:0 4em}html.skin-theme-clientpref-night .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}@media(prefers-color-scheme:dark){html.skin-theme-clientpref-os .mw-parser-output .navbar li a abbr{color:var(--color-base)!important}}@media print{.mw-parser-output .navbar{display:none!important}}

/* end https://en.wikipedia.org/ */

</style><div id="Operating_systems310" style="font-size:114%;margin:0 4em"><a href="Operating_system" title="Operating system">Operating systems</a></div></th></tr><tr><th scope="row" class="navbox-group" style="width:1%">General</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Comparison_of_operating_systems" title="Comparison of operating systems">Comparison</a></li>

<li><a href="Forensic_software_engineering" title="Forensic software engineering">Forensic engineering</a></li>

<li><a href="History_of_operating_systems" title="History of operating systems">History</a></li>

<li><a href="Timeline_of_operating_systems" title="Timeline of operating systems">Timeline</a></li>

<li><a href="Usage_share_of_operating_systems" title="Usage share of operating systems">Usage share</a></li>

<li><a href="Comparison_of_user_features_of_operating_systems" title="Comparison of user features of operating systems">User features comparison</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Variants</th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Disk_operating_system" title="Disk operating system">Disk operating system</a></li>

<li><a href="Distributed_operating_system" title="Distributed operating system">Distributed operating system</a></li>

<li><a href="Embedded_operating_system" title="Embedded operating system">Embedded operating system</a></li>

<li><a href="Hobbyist_operating_system" title="Hobbyist operating system">Hobbyist operating system</a></li>

<li><a href="Just_enough_operating_system" title="Just enough operating system">Just enough operating system</a></li>

<li><a href="Mobile_operating_system" title="Mobile operating system">Mobile operating system</a></li>

<li><a href="Network_operating_system" title="Network operating system">Network operating system</a></li>

<li><a href="Object-oriented_operating_system" title="Object-oriented operating system">Object-oriented operating system</a></li>

<li><a href="Real-time_operating_system" title="Real-time operating system">Real-time operating system</a></li>

<li><a href="Supercomputer_operating_system" title="Supercomputer operating system">Supercomputer operating system</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Kernel_(operating_system)" title="Kernel (operating system)">Kernel</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:6em"><a href="Computer_architecture" title="Computer architecture">Architectures</a></th><td class="navbox-list-with-group navbox-list navbox-odd" style="padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Exokernel" title="Exokernel">Exokernel</a></li>

<li><a href="Hybrid_kernel" title="Hybrid kernel">Hybrid</a></li>

<li><a href="Microkernel" title="Microkernel">Microkernel</a></li>

<li><a href="Monolithic_kernel" title="Monolithic kernel">Monolithic</a></li>

<li><a href="Multikernel" title="Multikernel">Multikernel</a></li>

<li><a href="Vkernel" title="Vkernel">vkernel</a></li>

<li><a href="Rump_kernel" title="Rump kernel">Rump kernel</a></li>

<li><a href="Unikernel" title="Unikernel">Unikernel</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:6em">Components</th><td class="navbox-list-with-group navbox-list navbox-even" style="padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Device_driver" title="Device driver">Device driver</a></li>

<li><a href="Loadable_kernel_module" title="Loadable kernel module">Loadable kernel module</a></li>

<li><a href="User_space_and_kernel_space" title="User space and kernel space">User space and kernel space</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Process_management_(computing)" title="Process management (computing)">Process management</a></th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em"></div><table class="nowraplinks navbox-subgroup" style="border-spacing:0"><tbody><tr><th scope="row" class="navbox-group" style="width:6em">Concepts</th><td class="navbox-list-with-group navbox-list navbox-odd" style="padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Computer_multitasking" title="Computer multitasking">Computer multitasking</a> (<a href="Cooperative_multitasking" title="Cooperative multitasking">Cooperative</a>, <a href="Preemption_(computing)" title="Preemption (computing)">Preemptive</a>)</li>

<li><a href="Context_switch" title="Context switch">Context switch</a></li>

<li><a href="Interrupt" title="Interrupt">Interrupt</a></li>

<li><a href="Process_(computing)" title="Process (computing)">Process</a></li>

<li><a href="Process_control_block" title="Process control block">Process control block</a></li>

<li><a href="Thread_(computing)" title="Thread (computing)">Thread</a></li>

<li><a href="Time-sharing" title="Time-sharing">Time-sharing</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:6em"><a href="Scheduling_(computing)" title="Scheduling (computing)">Scheduling<br>algorithms</a></th><td class="navbox-list-with-group navbox-list navbox-even" style="padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Fixed-priority_pre-emptive_scheduling" title="Fixed-priority pre-emptive scheduling">Fixed-priority preemptive</a></li>

<li><a href="Multilevel_feedback_queue" title="Multilevel feedback queue">Multilevel feedback queue</a></li>

<li><a href="Round-robin_scheduling" title="Round-robin scheduling">Round-robin</a></li>

<li><a href="Shortest_job_next" title="Shortest job next">Shortest job next</a></li></ul>

</div></td></tr></tbody></table><div></div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Memory_management_(operating_systems)" title="Memory management (operating systems)">Memory management</a>,<br><a href="System_resource" title="System resource">resource</a> protection</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Bus_error" title="Bus error">Bus error</a></li>

<li><a href="General_protection_fault" title="General protection fault">General protection fault</a></li>

<li><a href="Memory_paging" title="Memory paging">Memory paging</a></li>

<li><a href="Memory_protection" title="Memory protection">Memory protection</a></li>

<li><a href="Protection_ring" title="Protection ring">Protection ring</a></li>

<li><a href="Segmentation_fault" title="Segmentation fault">Segmentation fault</a></li>

<li><a href="Virtual_memory" title="Virtual memory">Virtual memory</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%"><a href="Non-volatile_memory" title="Non-volatile memory">Storage</a> access,<br><a href="File_system" title="File system">file systems</a></th><td class="navbox-list-with-group navbox-list navbox-even hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<ul><li><a href="Booting#BOOT-LOADER" title="Booting">Boot loader</a></li>

<li><a href="Defragmentation" title="Defragmentation">Defragmentation</a></li>

<li><a href="Device_file" title="Device file">Device file</a></li>

<li><a href="File_attribute" title="File attribute">File attribute</a></li>

<li><a href="Inode" title="Inode">Inode</a></li>

<li><a href="Journaling_file_system" title="Journaling file system">Journal</a></li>

<li><a href="Disk_partitioning" title="Disk partitioning">Partition</a></li>

<li><a href="Virtual_file_system" title="Virtual file system">Virtual file system</a></li>

<li><a href="Virtual_tape_library" title="Virtual tape library">Virtual tape library</a></li></ul>

</div></td></tr><tr><th scope="row" class="navbox-group" style="width:1%">Supporting concepts</th><td class="navbox-list-with-group navbox-list navbox-odd hlist" style="width:100%;padding:0"><div style="padding:0 0.25em">

<li><a href="Computer_network" title="Computer network">Computer network</a></li>

<li><a href="Shell_(computing)" title="Shell (computing)">Shell</a>

<li><a href="User_interface" title="User interface">User interface</a></li></ul></li>

</div></td></tr></tbody></table></div></div><div><div class="zim-footer">

This article is issued from <a class="external text" title="Last edited on 2025-01-05" href="https://en.wikipedia.org/wiki/?title=Separation_kernel&oldid=1267408782">Wikipedia</a>. The text is available under <a class="external text" href="https://creativecommons.org/licenses/by-sa/4.0/deed.en">Creative Commons Attribution-Share Alike 4.0</a> unless otherwise noted. Additional terms may apply for the media files.

</div>

</div></div>

</div>

</main>

</div>

</body></html>