lkml.org 
[lkml]   [1998]   [Apr]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: foreign fs security features (was Re: NCPFS overhaul)
Andrej Presern <andrejp@luz.fe.uni-lj.si> wrote:
> The solution: you implement a object oriented capability model (pure,
> not POSIX capabilities), then rebuild a UNIX (or any other) filesystem
> on top of that if you still need it.

Another way of getting global access to per-whatever variant file systems
is to have a distinct root for each "whatever"'s view of the file system.
Thus, if each user has a different view, look at
/auto/users/fred/usr/local/src/linux to get fred's view, and
/auto/users/george/usr/local/src/linux to get george's view.

If each process has a different view, you look at
/proc/1234/fs/usr/local/src/linux to get process 1234's view.

All this assumes that the distinctions are made by the kernel.

Expect to consume more resources running such a file system (dcache
isn't going to be quite as useful in obtaining efficiency).

--
Raul

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:42    [from the cache]
©2003-2011 Jasper Spaans