[cap-talk] Horton vs. ACLs - private namespaces andthe AuditProblem

[Karp, Alan H]

David Hopwood wrote:
> 
> So if I have permission to the file, and authority to transfer that
> permission to Alan, I can frame Alan as an insider?
> 
It's been known to happen.  Today it's done by sending a copy of the
file.  Of course, the sender gets in trouble for telling secrets.  I
expect that would apply to someone who transfers a permission.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp