[cap-talk] Horton vs. ACLs - private namespaces and the Audit Problem

[Karp, Alan H]

Jed wrote:
> 
> Horton provides an alternative mechanism that doesn't require such
> low level logging of capability transfers.  If the capability was
> legitimately transferred to Alan with Horton, then Alan would
> be listed as responsible and his access to the data would be
> logged in such a way as to make low level logs of capability
> transfers unnecessary.
> 
I agree.  I was pointing out that low level logs could be used to track
non-Horton transfers.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp