disappeared pro Linux evidence 13401

But the file descriptors *are* the way to access the functionality if you're not running in the kernel. It's not generally possible to bypbutt that interface, so in fact it provides nice security.

The security is enforced in the API. (It's not like the MMU directly knows about the security model, right?) Gee, just like the Unix scheme, just using a different API (function calls instead of file access).

That echoes this line from the actual document:

"Administrators cannot delegate administrative privileges: a user who needs any administrative capability must be made a full administrator, which compromises best security practices."

But this is not true. It completely ignores that there are permission types besides 'user' - there's also 'group' and 'world'. One can "delegate administrative privileges" to a group, and in a nice, fine-grained way.

-- Sincerely,

Ray Ingles (313) 227-2317

"In the 1980s, Bill Gates got the computer manufacturers to pay him for Windows for each computer manufactured, regardless of whose software was on it. In the 1870s, John D. Rockefeller got the railroads to pay him a rebate for every carload of oil they shipped, regardless of whose oil it was." - rovingeyes