I have long debated that question, “what’s the point of CHERI if you have seL4 (and Rust)?” In a nutshell, CHERI C offers rich, deterministic memory safety and intra-address-space software compartmentalisation, which enhances the overall security of ...
