July 4th, 2024

CheriBSD

CheriBSD, a secure Unix-like OS by SRI International and University of Cambridge, extends FreeBSD for Arm's Morello and CHERI-RISC-V. It emphasizes memory protection, software isolation, and security enhancements for diverse platforms.

Read original articleLink Icon
CheriBSD

CheriBSD is a Unix-like Operating System developed by SRI International and the University of Cambridge, extending FreeBSD to utilize Capability Hardware on Arm’s Morello and CHERI-RISC-V platforms. It focuses on memory protection and software compartmentalization. CheriBSD 23.11 offers features like memory safety for userspace and kernel, debugger support, pre-built USB installer, memory-safe KDE-based desktop, compatibility with existing applications, and a CHERI-enabled hypervisor. It runs on various platforms including Morello boards and QEMU. CheriBSD/Morello is a Digital Security by Design technology supported by various organizations and research programs. The system is designed to enhance security and memory safety in computing environments.

Link Icon 5 comments
By @cedws - 3 months
I can’t help but feel CHERI is a hardware hack for a software problem. Hardware has no business patching software’s errors. Given the history of vulnerabilities in hardware security features themselves, I’m also sceptical of it being a long term, robust solution. For instance, I recall a paper busting ARM’s Memory Tagging Extension.
By @evanjrowley - 3 months
Would be nice if an ARM Morello Framework motherboard was released with this.
By @cyberpunk - 3 months
I wonder why a separate distro and not upstream this work to FreeBSD?
By @hi-v-rocknroll - 3 months
Sadly, seL4's design approach and formal verification process still hasn't caught on. Until then, we're just rebuilding castles with slightly different grades of sand in the ocean surf and expecting a different result.
By @alberth - 3 months
Does Apple do anything like this with their hardware/software combo?