On Tue, Mar 20, 2007 at 09:24:05PM -0400, David Zeuthen wrote:
FWIW, this is something we sorely need in a modern system + all this
is
not restricted to HAL at all; it's about having a formal way of
classifying what a user (uid) / group (gid) / program (security context)
is allowed to do and not to do. Think about parental controls for
example. So as this is applicable to many other things where we today do
broken stuff like running X11 applications as uid 0 - and that pretty
much includes everything in the System->Administration menu. It's just
broken by design.
I'm very much looking forward to seeing what you're currently thinking about
all this. It'd be really nice if we could replace usermode/consolehelper
with something more sane.
--
Matthew Miller mattdm(a)mattdm.org <
http://mattdm.org/>
Boston University Linux ------> <
http://linux.bu.edu/>