Re: [9fans] security

[Charles Forsyth <forsyth@terzarima.net>]

>I'd say that's enough of a problem. Even Plan 9's well
>designed authentication domains don't properly mitigate
>the issue of the local account being compromised.

in practice, no, not the way they are used.
most processes start with most possible things in their
name spaces, whereas if we were really worried we'd
arrange that the other way round, so that most things
had just what they needed and no more.

that much could be done by constructing name spaces,
but it still wouldn't cover various classes of resource exhaustion.

also, given that we don't do use the system that way
that often, we might not build the environments correctly the first
few times.  still there's much less to check than with some other
approaches.  i wonder how you'd prove its properties.