kusumahendra: I also bet, it will use Linux kernel, probably with it's own user space (like what they do with Android), but probably
this time it won't use virtual machine or whatever it is they use in Android (it's slow as hell)
Hmm. Immediately coming to mind about that is how protected mode for the 386 is suppose work, where there's levels of permissions ranging from 0 (
root/full access) to 4 (
user space). Most OSes have 2 levels, 0 & 1, while 2&3 are left unchecked. Using those correctly you shouldn't need a sandbox that they use.
Levels include (
if memory serves me right)
0 - kernel
1 - drivers
2 - deamons and other privileged services
3 - userland
Note: Yes I know Android machines are typically
ARM systems, but they will likely still employ a similar permission system.
For higher security with some programs in Linux often
the root directory is changed that can't be changed back while the process is running. This lets you experiment with new
OS designs, limit programs that can be run,
or most importantly keep access to only select files and directories.