[cap-talk] More Heresey: ACLs not inherently bad
Karp, Alan H
alan.karp at hp.com
Mon Sep 1 14:10:30 CDT 2008
> The real issue is that the kinds of things that we generally forget are
> actually parameters: like the space of dynamic libraries...
There are two sets of authorities involved in an invocation. Those that are the same every time and those that vary. In my experience, the latter usually involves only a few parameters. It is the former that involves large numbers of rights. While specifying these rights in sufficient detail is complicated, treating them as an installation endowment means that the task need only be done once when the library is selected for use.
Virus Safe Computing Initiative
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
More information about the cap-talk