Marcus Brinkmann <[EMAIL PROTECTED]> writes:

> For problems with the Hurd passive translator design:
>
> http://lists.gnu.org/archive/html/l4-hurd/2005-10/msg00081.html

I would say in response to this that the only problem Marcus really
identifies here is that you can escape chroot jails with passive
translators, which is true, but also a part of the Hurd.  The Hurd
does not support chroot jails of the Linuxy/BSD sort.

That's ok, because we can make a jail a different way: by blocking the
servers you have access to.

But if you have access to the core servers, you have access to the
real system root, in many many ways.  This was a conscious design
choice, and I don't think it's problematic.

Thomas


_______________________________________________
Bug-hurd mailing list
Bug-hurd@gnu.org
http://lists.gnu.org/mailman/listinfo/bug-hurd

Reply via email to