From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: * X-Spam-Status: No, score=1.1 required=5.0 tests=DATE_IN_PAST_03_06 autolearn=no autolearn_force=no version=3.4.4 Received: (qmail 26498 invoked from network); 2 Feb 2021 01:20:28 -0000 Received: from 1ess.inri.net (216.126.196.35) by inbox.vuxu.org with ESMTPUTF8; 2 Feb 2021 01:20:28 -0000 Received: from oat.nine.sirjofri.de ([5.45.105.127]) by 1ess; Mon Feb 1 17:06:20 -0500 2021 Received: from sirjofri.de ([178.0.65.31]) by oat; Mon Feb 1 23:06:12 +0100 2021 Date: Mon, 1 Feb 2021 22:06:08 +0000 (UTC) From: sirjofri To: 9front@9front.org Message-ID: <9c978b00-674a-4425-ab75-5c19a0d01b9b@sirjofri.de> In-Reply-To: <861re06axf.fsf@cmarib.ramside> References: <0298936785AE322EABB8CBD08698D520@eigenstate.org> <861re06axf.fsf@cmarib.ramside> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Correlation-ID: <9c978b00-674a-4425-ab75-5c19a0d01b9b@sirjofri.de> List-ID: <9front.9front.org> List-Help: X-Glyph: ➈ X-Bullshit: transactional out-scaling-based self-signing shader Subject: Re: [9front] notes on user none Reply-To: 9front@9front.org Precedence: bulk Hello, I think the system assumes that every user only has access to oneself. And since users are secure (glenda can't read my files) it makes sense to save the files of user none with user permissions. If none was handled like all other users this would effectively give away the security by using auth/none. Making the privileges for none like the world user gives all other users also the same privileges as the world user, which they basically already have (hence it's world). Auth/none makes you none, but not authenticated. So it's like fake access. A nobody, a world user. No longer part of the system. You lose privilege. I'm not saying it's the most elegant design. But try giving nobody access to a system that's basically built around user privileges. Try that without a user. TLDR: it makes sense doing it like cwfs currently does and like described in the 9 paper. None shouldn't be seen as a user, more like batman, a symbol for everyone in the world. Therefore it needs different handling. sirjofri (Just my two cents. I'm not a Plan 9 veteran or 9front developer, only a user who cares.)