----------------------------------------------------------------
BEFORE YOU POST, search the faq at <http://java.apache.org/faq/>
WHEN YOU POST, include all relevant version numbers, log files,
and configuration files. Don't make us guess your problem!!!
----------------------------------------------------------------
Duane Gran wrote:
> Martin,
>
> Thanks for sharing this. I'm curious if you, or others, have some
> thoughts on how reasonable this is, with respects to performance. Most of
> the time the JVM remains idle, but it uses a bit of memory. Naturally
> there are grave consequences to allowing any user the ability to affect
> the whole engine for all users, but how feasible is it to do this for many
> zones?
Having one JVM per user is not good for performance, of course, but is
essencial for security. From the operating system point of view the JVM
is just one process, and access permissions for files and other resources
are checked against this process, not particular threads.
You typically cannot have both tight security and high performance, there
must be some tradeoff.
Martin
--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe: [EMAIL PROTECTED]
To unsubscribe: [EMAIL PROTECTED]
Archives and Other: <http://java.apache.org/main/mail.html>
Problems?: [EMAIL PROTECTED]
