I've read about GrapheneOS. There is nice feature - IOMMU isolation.
I am intrested in technical details of this, so i have some questions:
- is baseband processor's realtime OS completly isolated from application processor/memory areas?
- how about some kind of privileged supervisors that are starting on the early stages of booting process? Do we have any control of this?
- which repository contains code related to iommu? I'd like to look at this - i have some experience in low level ARM programming so probably i will understand most of this :)