Re: Design principles and ethics (was Re: Execute without read (was [...]))

[Marcus Brinkmann]

At Sat, 29 Apr 2006 20:09:09 -0400,
"Jonathan S. Shapiro" <address@hidden> wrote:
> > Going back to confinement, let me state it very clearly, once and for
> > all, because you keep getting it wrong:
> > 
> >   * * *   Every process in the Hurd will be confined.   * * *
> > 
> > It will be confined because it was created by its parent, so it meets
> > the definition of confinement in the most trivial sense.
> 
> This is complete nonsense. The confinement property states:
> 
>   A confined application can only transmit data through authorized
>   channels.
> 
> However, any reading of the original paper makes clear that the
> definition of confinement occurs in a context:
> 
>   - There is a process that is attempting to transmit.
>   - The process is free from external coercion in regard to
>     transmission. That is: transmission requires both permission
>     **and intent**.

Define "external".

Thanks,
Marcus