Re: RFC: Revised authentication protocol

2016-09-21 Thread Samuel Thibault
Olaf Buddenhagen, on Mon 19 Sep 2016 21:52:38 +0200, wrote: > Note that for the container solutions (lightweight virtualisation) I'm > envisioning for the Hurd -- with things like sub-users -- we are likely > to need some kind of auth delegation scheme or something like that; Well, AIUI we already

Re: firmlink deleting files on boot / interpretation of find -xdev switch

2016-09-21 Thread Samuel Thibault
Olaf Buddenhagen, on Mon 19 Sep 2016 23:43:55 +0200, wrote: > I don't know which threads you have read exactly; but there have been > pretty conclusive discussions on this issue IMHO. I'd be really good if such conclusions would have been written somewhere else than a list thread :/ Samuel

Re: firmlink deleting files on boot / interpretation of find -xdev switch

2016-09-21 Thread Olaf Buddenhagen
Hi, On Mon, Sep 05, 2016 at 09:55:44PM -1000, Brent W. Baccala wrote: > On Thu, Sep 1, 2016 at 12:38 PM, Richard Braun wrote: > > This was famously shown with the example of the > > firmlink translator used in /tmp, which would cause the removal of > > any file targeted by the firmlink on /tmp c

Re: firmlink deleting files on boot / interpretation of find -xdev switch

2016-09-21 Thread Olaf Buddenhagen
Hi, On Tue, Sep 06, 2016 at 02:49:31PM -1000, Brent W. Baccala wrote: > On Tue, Sep 6, 2016 at 2:05 AM, Richard Braun wrote: [...] > > The solution, whatever it is, should focus only on determining whether > > a server can be trusted or not. This should affect everything (servers, > > (active) t

Re: RFC: [PATCH] Fix setpriority calling __task_priority() for processes instead of threads.

2016-09-21 Thread Olaf Buddenhagen
Hi, On Wed, Aug 31, 2016 at 02:16:12PM +0200, Samuel Thibault wrote: > Linux' notion of nice values is already not > really POSIX for root :) (POSIX doesn't define negative nice values). It's been a while; but I'm almost confident that according to my last reading of the POSIX man pages, the Lin

Proxy memory objects (was: Denial of service attack via libpager)

2016-09-21 Thread Olaf Buddenhagen
Hi, On Mon, Aug 29, 2016 at 11:15:48AM +0200, Richard Braun wrote: > OK, this comes from the fact that io_map directly provides memory > objects indeed... Do we actually want to pass them around ? How > come calls like memory_object_init (specifically meant to be used > between the kernel and the

Re: problems with a subhurd

2016-09-21 Thread Olaf Buddenhagen
Hi, On Sun, Sep 04, 2016 at 12:34:09PM +0200, Justus Winter wrote: > I recommend against shutting down subhurds. This is a regression, though -- I'm pretty sure I used `halt` and/or `reboot` in subhurds in the past. (Sometimes it failed; but it never broke my main instance IIRC...) -antrik-

gnumach copyright assignment (was: [bug #49056] sending mach_port_kernel_object to non-task object crashes mach)

2016-09-21 Thread Olaf Buddenhagen
Hi, On Sun, Sep 11, 2016 at 03:27:05PM +, Kalle Olavi Niemitalo wrote: > If I understand > https://www.gnu.org/prep/maintain/maintain.html#Legally-Significant correctly, > the FSF does not want more than around 15 lines of code without a copyright > assignment. The FSF doesn't actually requi

Re: RFC: Revised authentication protocol

2016-09-21 Thread Olaf Buddenhagen
Hi, On Sun, Sep 04, 2016 at 10:29:54PM -1000, Brent W. Baccala wrote: > Here's my proposal for dealing with the authentication issue. > > There should be an extra send right passed from the auth server, to the > client, that the client then passes along to the server in its > authentication requ