Peter Schuller wrote:

> Am I correct in thinking that the idea is that upon login, the profile
> (applications settings, etc - something like the user specific
> registry info on Windows?) gets loaded, possible changed by running
> programs, and then stored again on disk when one logs out?

You are quite correct in guessing what I had in mind. After developing
the Registry API (inverted tree like structure) I thought of this
scheme. The registry supports merging and synchronization, and it can
run seamlessly in distributed applications, or many concurrent user
sessions.

> The problem with this is that it interferes with multiple logins.

Not really... As long as there is at least one active session, no
encryption and saving to the disk will be made (unless, of course, for
matters of caching, buffering, etc., etc.). When all sessions of a
specific user have been terminated or died (network time-out, for
example), then the user's profile is considered "inactive" and will be
securely stored to disk (or whatever other medium).

> <snip> I believe any "profile" data should be accessed directly on
> disk (or wherever the "authorative" copy resides).

Indeed, and with my model it will be so, just that there will exist a
transparent layer between user application and user profile data on
disk: secure encryption. That is part of the system, and as I suggested
in my original e-mail, I would be happy if this was done at file system
level - system core at the most. Not even administrators should have
access to this, on the VM and the JOS security monitor.

-- 

        "Though this be madness, yet there is method in't."
                                          - William Shakespeare
________________________________________________________________________
[MAIL: mailto:[EMAIL PROTECTED]] [URL: http://www.outworld.org/people/al/]
[TEL1: (30) +31 422392] [TEL2: (30) +31 428154] [CELL: (30) +937 110247]
[ICQ#: 11876955] [DSS: 0xDBEF8ECC] [RSA: 0xBC469499] [TIME: GMT +2.00 H]
[ADDRESS: 14 Argonafton St., Kalamaria, 551 31, Thessaloniki, Greece GR]
DO NOT SEND ME ANY UNSOLICITED COMMERCIAL, POLITICAL OR RELIGIOUS E-MAIL

_______________________________________________
General maillist  -  [EMAIL PROTECTED]
http://jos.org/mailman/listinfo/general

Reply via email to