l4-hurd
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Translucency counterexample


From: Anton Tagunov
Subject: Re: Translucency counterexample
Date: Fri, 12 Jan 2007 12:22:31 +0300
User-agent: Thunderbird 1.5.0.9 (Windows/20061207)

Hi,

J> The ability to extract the brand capability means that
J> I can violate the integrity of the process type system. If this
J> integrity is violated, the foundational chain of trust is broken because
J> even the *primordial* servers cannot be reliably identified.

Been bugging me a long time...

Doesn't existence of process type system
preclude "field replaceability"?

If any process is able to check "identity" of other
process it can refuse to work with replacement implementation right?

Anton




reply via email to

[Prev in Thread] Current Thread [Next in Thread]