[EROS-Arch] Error logging

[Jonathan S. Shapiro]

> OK, I see what you are saying - but since the TCB is in the hands of
> (one of) the user(s), all the inner workings are surely already
> available to the user(s), are they not?


Not in the normal case. Much of the TCB is only accessable under disk
forensics, because it is controlled by primordial software. How many people
do you know who are willing to run fsdb? It's really easy to permanently
screw up a disk with fsdb!

This is not an absolute impediment, but it presents to the user a level of
both technical difficulty and practical risk that for many developers it
constitutes an acceptable disincentive to discovery.

Jonathan