lkml.org 
[lkml]   [1999]   [Jan]   [23]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: User vs. Kernel (was: To be smug, or not to be smug, that is , the question)
Date
MOLNAR Ingo writes:
> On Sat, 23 Jan 1999, Albert D. Cahalan wrote:
>
>>>>>> * Lack of generalized message passing
>>>>>
>>>>> (RT-signals in Linux, a feature of Linux 2.2)
>>>>
>>>> Could user acahalan send 42 bytes to user mmuscovi?
>>>
>>> sure, 'mail mmuscovi < ./42bytefile'. What are you trying to
>>> achieve and why?
>>
>> The original poster said "generalized message passing" and you
>> responded with something that can pass 4 or 8 bytes between
>> processes with the same UID. That isn't very general.
>
> and my question is/was 'what do you need it for, exactly (ie. what
> application)'.

Personally, I don't need it. I can see why the original poster
might want it though: some people like the microkernel design,
and they might want to use some of the concepts on Linux.

Maybe they would implement a Win32 server like NT 3.x had.
(I assume that normal people want to keep Win32 out of the kernel)
(yes, I know about WINE - it is not complete either)

>>>>> (i guess you missed include/linux/capability.h, a feature of 2.2.
>>>>> Not completely finished, but the main mechanizm is in there.)
>>>>
>>>> I believe he means "true" capability support. In any case,
>>>> Linux can't revoke normal user capabilities.
>>>
>>> what do you mean by 'true'.
>>
>> True capability systems are token-based. They work very much like
>> file descriptor security. Access can be passed from process to
>> process, but is not automatically shared by all processes with the
>> same UID. [...]
>
> this is what Linux capabilities do too, if you care to take a look
> at the code.

No, Linux capabilities grant special privilege.
True capability systems can control object access.
True capabilities take the place of ACLs and could
even take the place of the process UID and GID.

It is a very strange concept. I'm not sure how practical it
could be, but at least one unixy system (DG-UX) can use
capabilities in addition to normal security.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:49    [from the cache]
©2003-2011 Jasper Spaans