[cap-talk] In Defense of Identities

[Karp, Alan H]

Shap wrote:
> > I contend there are better ways to achieve your goal than 
> introducing
> > ACLs.
> 
> Quite probably.
> 
> But are there more *marketable* ways?
> 
Actually, I think people are coming to the awareness that ACLs are just
barely good enough within a machine, but they are unworkable across
administrative domains.  I just got a note saying that the key technical
guy at DISA is now advocating ABAC.  That's probably because they've run
into problems they can't solve with IBAC.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp
  
  

> -----Original Message-----
> From: cap-talk-bounces at mail.eros-os.org 
> [mailto:cap-talk-bounces at mail.eros-os.org] On Behalf Of 
> Jonathan S. Shapiro
> Sent: Tuesday, December 05, 2006 10:51 AM
> To: General discussions concerning capability systems.
> Subject: Re: [cap-talk] In Defense of Identities
> 
> On Tue, 2006-12-05 at 12:12 -0600, Karp, Alan H wrote:
> > I contend there are better ways to achieve your goal than 
> introducing
> > ACLs.
> 
> Quite probably.
> 
> But are there more *marketable* ways?
> 
> shap
> -- 
> Jonathan S. Shapiro, Ph.D.
> Managing Director
> The EROS Group, LLC
> +1 443 927 1719 x5100
> 
> _______________________________________________
> cap-talk mailing list
> cap-talk at mail.eros-os.org
> http://www.eros-os.org/mailman/listinfo/cap-talk
>