On Sat Dec  5 03:11:09 EST 2009, s...@nipl.net wrote:
> > the standard way of passing file descriptors is by fork/exec.
> > this allows security is handled by the normal means.
> 
> Erik/others, would you please give some feedback on my idea (a join call which
> connects two fds together and disowns them from the process).  Passing fds
> around does not solve the same problems and has nothing to do with what I
> suggested.
> 
> Perhaps this list is not the right place to air "new" or different ideas
> related to the implementation of operating systems?

the problem with syscalls is (as we see in linux and before them
berkeley), it is realatively easy to think of a special case for which
a specialized system call would be just the ticket.

the set of all these special cases is quite large. and since the goal
of plan 9 is to be a (relatively) general purpose operating system
that can be understood by a single person, and well-maintained
by a small group, one needs a pretty compelling case for a new
system call.

further, system calls are by definition tied to the machine the call
was made on.  system calls live outside the namespace.  i would
first think about doing this as a kernel file server.  but it seems
to me there are security concerns.

i don't yet see that a compelling case has been made for a new
system call or even a kernel fileserver.  a real world (working)
example and a demonstration of why existing mechanisms 
fall short would be helpful.

- erik

Reply via email to