>So I’ve been thinking about real time Linux and how we actually provide an entirely separate kernel for it. I’ve been thinking, there could be a better way. Please keep in mind that I am not a kernel hacker.
What is Real-Time?
Real-time is a requirement that the worst-case response time to an event of an operating system is under some time requirement. It’s useful for multimedia, embedded devices, etc.
What is MAC (SELinux and AppArmor)?
Mandatory Access Control (or the part I am covering here) basically wraps individual running processes in there own security sandbox. Basically forcing it to run with only access to certain things.
My idea: Could we use MAC to allow some applications real-time, instead of having a separate kernel?
This would mean that when you download an application through the package manager that applications that require real-time would come with apparmor or selinux configuration files to force them to run in a real-time context.