[cap-talk] Reducing Ambient user authority in a Type Safe /Memory Safe OS.

[Bill Frantz]

david-sarah at jacaranda.org (David-Sarah Hopwood) on Saturday, January 2, 2010 wrote:

>Not really. You need a way to account for resources (including memory
>segments) held by processes and not linked into the filesystem, anyway.

Agreed.


>So files held open by a process can just be accounted to that process.
>Files linked from multiple places should be accounted to all of those
>places (each for the full size).

How you account for shared resources is a religious issue, and I'm an
agnostic.

IMHO, it is good to allow many users to share the cost of an expensive
resource, possibly making something that would otherwise be too expensive
for one affordable for all.

OTOH, I've been in the computer services business, now called "cloud
computing". If you can get every user to pay full price for a shared
resource, you make more money.

The only good news in this well-trodden area is that storage continues to
get cheaper, so how you charge for it matters less for old uses.

Cheers - Bill

-----------------------------------------------------------------------
Bill Frantz        | gets() remains as a monument | Periwinkle
(408)356-8506      | to C's continuing support of | 16345 Englewood Ave
www.pwpconsult.com | buffer overruns.             | Los Gatos, CA 95032