Date: Fri, 15 Sep 2006 09:33:55 +0100 From: Ceri Davies <ceri@submonkey.net> To: Robert Watson <rwatson@FreeBSD.org> Cc: arch@FreeBSD.org, trustedbsd-discuss@TrustedBSD.org Subject: Re: New in-kernel privilege API: priv(9) Message-ID: <20060915083355.GK93949@submonkey.net> In-Reply-To: <20060913194559.U53301@fledge.watson.org> References: <20060913150912.J1823@fledge.watson.org> <20060913184115.GE93949@submonkey.net> <20060913194559.U53301@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Wed, Sep 13, 2006 at 09:28:24PM +0100, Robert Watson wrote:
> A couple of points:
>
> First, the system present in Solaris is, in effect, a variant of some draft
> of POSIX.1e (or possibly vice versa), albeit with differently named
> constants. All the comments I made regarding POSIX.1e apply to it.
> Specifically, the priv(9) kernel API offers much more fine-grained
> assignment of rights relating to system administration, etc, corresponding
> specifically to the set of privileges defined in our kernel.
Agreed.
> Second, privileges(5) describes an alternative privilege model exposed to
> userspace, whereas the work I've described is an in-kernel API for
> privilege checking. It doesn't imply (or, for that matter, implement) a
> change in the OS privilege model, although clearly it would facilitate
> doing that in the future. Since priv(9) is not an application API, it's
> not clear that application portability is an immediate concern.
That's the difference I was looking for, thanks.
> I think it's useful to compare the Solaris privilege set, and also consider
> whether in the future we want to adopt a privilege model along similar
> lines. However, given that the privilege models across various UNIX and
> non-UNIX systems are all similar and yet completely different, I'm not sure
> that being similar and yet different from Solaris is particularly a problem
> -- more, say, than being similar but different from IRIX, Linux, Windows,
> etc.
True enough. Thanks.
Ceri
--
That must be wonderful! I don't understand it at all.
-- Moliere
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (FreeBSD)
iD8DBQFFCmVzocfcwTS3JF8RAm2WAJ0VyFfVnLFaUhqJNnAr2AcVYkEiYwCZAZXd
Osof4g2d8KRP9U5HbWH/JSA=
=4dhl
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060915083355.GK93949>