Re: [developer] A couple of kernel questions

[Lonnie Cumberland <lonnie@outstep.com>]

Yea, I thought about ACLs and RBAC approaches but think that a 
property-graph database could possibly offer much more potential still. 
I could, of course be wrong on this, but I think that it is a very 
interesting possibility maybe worth experimenting with and investigating 
further as a thought.

Also, I think that a hierarchal tree-based filesystem allows for too 
many attack vectors for bad actors who can gain access up and down the 
tree looking and mostly eventually finding weak spots to assault and 
gain access.  A PGDb approach seems like it would not expose neighbor 
nodes (i.e. application libraries and others) and would be perfectly 
in-line with application/data sandboxing ideas while allowing much more 
control with a finer-grained approach, just as a rough thought.

Thanks again,
Lonnie

On 7/17/2024 10:06 AM, Udo Grabowski (IMK) wrote:
> On 17/07/2024 15:28, Lonnie via illumos-developer wrote:
>> ....
>> 2. Another crazy thought that I had was about the possibly of 
>> investigating what it might take to (fork illumos for an experiment) 
>> and try to remove the dependencies on a hierarchal tree-based 
>> filesystem and to implement a type of "Property-Graph Database 
>> (PGDb)" filesystem.  The rationale here is that a hierarchal 
>> tree-based filesystem can easily be represented as well but that a 
>> PGDb filesystem also allows for assigning new types of attributes to 
>> files, blocks, objects, users, etc. and thus allowing for granular 
>> security on users at the application level.  Users can be 
>> allowed/disallowed to see/access application/files/block/objects and 
>> only authorized applications are "mapped" to a particular user.
>>
>
> That's mostly ACLs and RBAC/Projects. Already there...
>
>
> ------------------------------------------
> illumos: illumos-developer
> Permalink: 
> https://illumos.topicbox.com/groups/developer/Tf2a2de95f2063204-M80e6a50f391c7bb694aa2500
> Delivery options: 
> https://illumos.topicbox.com/groups/developer/subscription