/sys/doc/ Documentation archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Security

I've read somethings about namespaces and security in Inferno. For example in
the handout and this message:

>Subject: Re: Security through bindings 
>From: rob@plan9.bell-labs.com

>The ability to control the name space of a process is an important
>component of security in Inferno.

What kind of security is meant? And how does this work?

I've gave a process a new namespace, which made the process' active directory
root, but I still could reach the rest of filesystem by entering a path like
this: /../../filename

Is this supposed to be possible?

Daniel van Os
________________________________________________________________________
Computer Science/SPA Group | pi = 3             |email: os@cs.utwente.nl 
University    of    Twente |   (for pi small    |phone:     053-489 4179
Enschede   The Netherlands |       and 3 large) |room#:         INF-4042