Re: [9fans] /sys/lib/newuser patch

[hiro <23hiro@googlemail.com>]

And the users are running in single sandboxes?

On 4/12/10, erik quanstrom <quanstro@quanstro.net> wrote:
>> 2010/4/12 hiro <23hiro@googlemail.com>:
>> > I have not the slightest idea about the complexity involved; And I
>> > think I misunderstand how much of plan9 is actually running in a
>> > sandbox. But what if we wanted to have a working security system for
>> > multiple users in 9vx. Would it be - or is it - possible?
>>
>> Yes, it is possible, but it probably requires writing something to use
>> PAM (or whatever authentication mechanism is set up) on the host
>> system. I have a few ideas for this.
>
> iirc, 9vx doesn't have devcap.
>
> the problem you're addressing can't be addressed well through #Z.
> unix systems act differently than plan 9 ones do. there are a host
> of locking, etc. questions that #Z doesn't handle either.   it would be
> easier
> to use a plan 9 fs (ken fs, cwfs, fossil).  then you wouldn't need to
> deal with unix authentication.
>
> - erik
>
>