Kage: Google Experimenting With Linux Driver Isolation Using In-Kernel LFI Sandboxes

Google engineers are experimenting with Linux kernel device driver isolation using in-kernel sandboxes leveraging LLVM's Lightweight Fault Isolation (LFI) functionality...