[cap-talk] More Heresey: ACLs not inherently bad

Jonathan S. Shapiro shap at eros-os.com
Thu Sep 11 05:27:29 CDT 2008


On Thu, 2008-09-11 at 03:22 -0700, Jed Donnelley wrote:
> At 02:47 AM 9/11/2008, Jonathan S. Shapiro wrote:
> >On Wed, 2008-09-10 at 14:45 -0700, Jed Donnelley wrote:
> > > The returning of a "filtered" capability for every fetch is not
> > > significantly different from the "deep read-only"...
> >
> >You misunderstand me. It is not the returned capability I am proposing
> >to filter. That is useful, but it is a mostly orthogonal issue. What I
> >am proposing to filter is the name space that is visible to the fetch
> >operation.
> 
> The hierarchical or flat name space?  (trying to get to the source of 
> my confusion)...

For the purposes of this discussion, it doesn't matter whether the name space is flat or hierarchical.



More information about the cap-talk mailing list