On Fuchsia, a newly created process has nothing. A newly created process cannot access any kernel objects, cannot allocate memory, and cannot even execute code. Of course, such a process isn’t very useful, which is why we typically create processes with some initial resources and capabilities.
Most commonly, a process starts executing some code with an initial stack, some command line arguments, environment variables, a set of initial handles. One of the most important initial handles is the
PA_VMAR_ROOT, which the process can use to map additional memory into its address space.
Not the most detailed description just yet, but Fuchsia seems to be getting fleshed out more and more.
Hoping we will get more stories like this one – It is refreshing to hear about a new kernel/operating system. Not that I dislike nostalgia yet I wish for real improvements in user experience rather than just rehashing of old ideas.
It appears that approaches/concepts for improving inherent computing security are being explored. This is a great start.