Re: Using fs views to isolate untrusted processes: I need an assistant architect in the USA for Phase I of a DARPA funded linux kernel project

[David Greaves <david@dgreaves.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hubert Chan wrote:
|>>>>>"Christian" == Christian Mayrhuber <christian.mayrhuber@gmx.net>
writes:
|
|
| Christian> Linux VServer might be a project that already tries to
| Christian> accomplish this task.
|
| After poking around the linux-veserver.org page, it sounds like Linux
| VServer is completely different from what Hans/Namesys is trying to do.
| Linux VServer still uses chroot.  From what I understand about views,
| you don't need to set up a chroot; applications run under the same
| filesystem as everything else.  You just need to, for example, say that
| apache is allowed to read from /etc/apache/*, /var/www, /usr/lib, etc.,
| and is allowed to write to /var/log/apache/*.  Then, even though apache
| is running under the same filesystem, it won't even be able to see, say
| /etc/passwd.
|

It sounds like running exe's setgid (or addgid?) and then having acls.
But then the acls are not tied to the file objects, more appended to the
file acl list by 'pattern' according to the exe.

Acls at a distance :)

David
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBDrvU8LvjTle4P1gRAkt1AJsFhmZI6OP4KRxY+JnPnq6lhhozLACePwl7
s4Zl5NO9YcTLYcKBxg1g9Qc=
=ZU/S
-----END PGP SIGNATURE-----