[cap-talk] More Heresey: ACLs not inherently bad

Jonathan S. Shapiro shap at eros-os.com
Thu Sep 18 08:53:44 CDT 2008


On Wed, 2008-09-17 at 18:36 -0700, Jed Donnelley wrote:
> I don't understand what you would consider "credible".

A system that satisfies my originally stated problem. I did neglect the
requirement that participants Alice and Bob need to be able to pass
capabilities to each other. The reason this is important is that it
forces us to make membranes universal, and therefore exposes the
complexity of membranes.

>   A system like
> NLTSS (and I presume KeyKOS and many others) did just fine with sharing
> without having to use a single large directory naming structure with
> access restricted by "user"....

Perhaps, but my problem statement is only tangentially related to
directories. You're mixing two separate discussions.


shap



More information about the cap-talk mailing list