Re: comments on Linux Myths...

[Ramon van Handel <vhandel@chem.vu.nl>]

Thomas Pfau wrote:
> Why does an operating system data structure require access control
> lists?  Are you implying that unprivileged programs could otherwise gain
> access to operating system internals?  You call this secure?

I'm absolutely not up to date on NT internals (so don't take
my word for this), but from what I've understood NT exports
LOTS of internal data structures to applications.  An app
with permissions on a data structure may read and possibly
change it.  It seems to me like that is a braindead way to
set up an OS, but then that's a matter of opinion :)
 
I could look through my inbox whether I can find some examples
on the kind of thing we're talking about here, if anyone's
interested.  Perhaps it'll help in forming a counter-argument
(what WNT does with an ACL linux can do much more securely
with XXX system call...)

Ramon


-
Fud-counter:  Setting straight the facts
Archive:      http://mail.nl.linux.org/lists/
Web Site:     http://fud-counter.nl.linux.org/