linux-kernel - Re: Thinking outside the box on file systems

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-Id: <A699C8AE-6C16-46FA-9C55-EFA4FA1718ED@mac.com>
Date:	Wed, 15 Aug 2007 14:14:27 -0400
From:	Kyle Moffett <mrmacman_g4@....com>
To:	Marc Perkel <mperkel@...oo.com>
Cc:	Phillip Susi <psusi@....rr.com>,
	Michael Tharp <gxti@...tiallystapled.com>,
	alan <alan@...eserver.org>,
	LKML Kernel <linux-kernel@...r.kernel.org>,
	Lennart Sorensen <lsorense@...lub.uwaterloo.ca>
Subject: Re: Thinking outside the box on file systems

On Aug 15, 2007, at 14:05:23, Marc Perkel wrote:
> In this new system setfacl, chmod, chown, and chgrp all go away  
> except inside of an emulation layer. File and directories no longer  
> have permissions. People have permission to naming patterns. So if  
> you put a file into a tree or move a tree then those who have  
> permissions to the tree have access to the files.
>
> It eliminates the step of having to apply permission after moving  
> files into a tree. You don't have to change file permissions  
> because files no longer have permissions.

And I'm trying to tell you that unless you have some magic new  
algorithm that turns NP-complete problems into O(log(N)) problems,  
your idea won't work.  You can't just say "I just do one little thing  
(mv) and the entire rest of the computer automagically changes to  
match", because that would imply a single unscalable global kernel  
lock.  "Pattern"-matching is either NP-complete or high-polynomial- 
order, depending on how its implemented, and if you want to do a  
recursive-chmod during a directory move then you're going to have  
race-conditions out the ass.  If you have code or solid math to back  
up your postings then please do so, but otherwise you're just wasting  
time and bandwidth.

Cheers,
Kyle Moffett

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/