Capabilities workshop, followup questions

[Kris Kennaway]

On Sun, 18 Jun 2000, Robert Watson wrote:

> This was pretty much the conclusion we came to at the workshop, although
> it was noted that this is not the behavior on Linux.  However, before the
> workshop started, Richard Offer and I were discussing at least one reason
> why you might want to allow threads to work with their own credential and
> capability sets: multi-threaded userland servers.  The example I started

Wouldn't this present a problem since threads all share the same memory
space, so a lesser-privileged thread can increase its privileges by
modifying the runtime status of a higher privileged one?

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe at alum.mit.edu>

To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-discuss" in the body of the message