Le mardi 09 décembre 2014 à 14:49 +0000, Schaufler, Casey a écrit :

(snip)

> The Cynara checks are going to have to be removed. I am curious as
> to how the resources that were managed by the BP in the prior design
> are going to be managed in the dual-process model.

Hi Casey,

That is an interesting question. How to remove cynara checks from BP?
But there is also a very interesting question that I am seeing now:
should any client of cynara be considered as privileged (that was my
previous requirement) if this client is already constrained by smack
isolation? I'm thinking that it is not possible but I can also
understand that it could be the opposite.

> > I am also skeptical on the fact that BP will run without privileges. But
> 
> The BP can start with privilege, but will need to drop it before it goes
> anywhere near application code. That is, until it invokes EP or GP or
> forks off RP.  And of course, it can't make decisions about resource
> access.
> 
> > I am not expert and should trust developers of crosswalk.
> 
> Trust should be based on understanding. If you don't understand
> there is no reason you  should trust.

Right =D

But so why having 2 processes? One is enough.
What is shared? BP+EP? Then how are managed hybrid apps?

Best regards
José



_______________________________________________
Dev mailing list
[email protected]
https://lists.tizen.org/listinfo/dev

Reply via email to