Kage: Google Experimenting With Linux Driver Isolation Using In-Kernel LFI Sandboxes
Google engineers are experimenting with Linux kernel device driver isolation using in-kernel sandboxes leveraging LLVM's Lightweight Fault Isolation (LFI) functionality...
We haven't written up this one. Phoronix has the full story — the link below goes straight to it.