Linux-Development-Sys Digest #111, Volume #7     Thu, 26 Aug 99 06:14:15 EDT

Contents:
  Re: why not C++? (Johan Kullstam)
  where are packets created? (Yung-Hsiang Lu)
  Re: Bypass Login ("stan168")
  Re: Jesus: the ultimate OS (Johan Kullstam)
  Re: Jesus: the ultimate OS (Miles Bader)
  Re: is there a package for linux(rh6.0) to allow viewing of  (FIT)
  Re: does linux have a package for drawing block diagrams ? (FIT)
  Re: PROPOSAL: A secure, simple NIS replacement (Tuomo Pyhala)
  Re: I HATE LT WIN MODEM!!!!!!!!!!!!!!! (Darryl Bryant)
  Re: PROPOSAL: A secure, simple NIS replacement (Tuomo Pyhala)
  Re: Jesus: the ultimate OS ("Christopher R. Thompson")
  Re: Custon Device Drivers (David Schwartz)
  Re: [kernel] how to measure running time in nanosecond? (David Schwartz)
  Re: high speed floating point coprocessor ("Little Rascal")
  Re: Jesus: the ultimate OS ("Christopher R. Thompson")
  Re: Jesus: the ultimate OS ("Christopher R. Thompson")
  Re: Jesus: the ultimate OS ("Christopher R. Thompson")
  How To; SmartWare & Linux ("Leonzo E. Miller III")
  Re: Jesus: the ultimate OS ("Christopher R. Thompson")
  Re: Jesus: the ultimate OS - Please Go Away ("Christopher R. Thompson")
  Re: what about SGI's xfs? (Peter Samuelson)
  Re: does linux have a package for drawing block diagrams ? (Peter Pointner)

----------------------------------------------------------------------------

Crossposted-To: comp.os.linux.development.apps,comp.os.linux.misc
Subject: Re: why not C++?
From: Johan Kullstam <[EMAIL PROTECTED]>
Date: 25 Aug 1999 23:39:28 -0400

[EMAIL PROTECTED] (Kaz Kylheku) writes:

> The same is not true of the cross product: it is a special case that
> only works in 3 space.  It also does not commute, so it doesn't
> satisfy an important property that is usually associated with the
> multiplication operator; on that basis, a case can be made for
> giving precedence to the dot product when deciding which gets the *
> operator.
> 
> That is why I suggested that * be used for dot and % for
> cross. Also, the glyph of % more closely resembles a cross, than *
> does, and * more closely resembles a dot than % does. Oh, and the
> precedence of % is suitable.

perhaps not for cross-product.  the cross-product isn't associative.
(R^3,+,x) is a Lie algebra[1].

[1] where R^3 is triples of reals, + normal vector addition and x is
    the cross product.

-- 
J o h a n  K u l l s t a m
[[EMAIL PROTECTED]]
Don't Fear the Penguin!

------------------------------

From: [EMAIL PROTECTED] (Yung-Hsiang Lu)
Subject: where are packets created?
Date: 26 Aug 1999 03:42:09 GMT

Hi, Everyone,

Where are network packets created?  Is this protocol specific?

When I ftp a large file, is it divided into small pieces (I guess so).
Is this the responsibility of ftp or the device driver?  Is there a
study about optimal packet sizes?  What are the typical packet sizes?
How about http for a large gif file?

Thanks a lot!

-- 
                                                   Sincerely,
                                                   Yung-Hsiang Lu
                                                   [EMAIL PROTECTED]

------------------------------

From: "stan168" <[EMAIL PROTECTED]>
Crossposted-To: 
comp.os.linux.development.apps,comp.os.linux.misc,de.comp.os.linux,jaring.os.linux
Subject: Re: Bypass Login
Date: Thu, 26 Aug 1999 11:44:55 +0800

Thanks for everybody help.

I can do it with set the run level to 1 which is single-user mode in Redhat
6.0.



------------------------------

Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
From: Johan Kullstam <[EMAIL PROTECTED]>
Date: 25 Aug 1999 23:51:26 -0400

"Christopher R. Thompson" <[EMAIL PROTECTED]> writes:

> Paul E. Lehmann wrote:
> > 
> > Hmmm,
> > 
> > Ok, Lets see.  Jesus was one of many so called "Healers and Messiahs" of his
> > day" 
> 
> Have YOU NOT seen miracles and healing? Is that his fault, or your own?
> 
> > If you believe that such an individual actually existed then it can be said
> 
> I do. You hear his name every day many times a day. How can it possibly
> be a figment of so many peoples imaginations. I think your mind is
> playing tricks on you!

of course jesus exists!  he's from the dominican republic and plays
shortstop.

-- 
J o h a n  K u l l s t a m
[[EMAIL PROTECTED]]
Don't Fear the Penguin!

------------------------------

From: Miles Bader <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
Date: 26 Aug 1999 11:17:11 +0900

"Pizzi" <[EMAIL PROTECTED]> writes:
> Try to keep in mind that perhaps there IS something to the religion
> and perhaps there is something even you could learn from it.  :-)

This is probably true; however it seems fairly certain that this
`something' is quite different -- and much less grand -- than what the
typical religious cheerleader says it is.

It's a shame that these real (but mundane) benefits need all the blood
and thunder to make them stick...

Cheers,

-Miles
-- 
Love is a snowmobile racing across the tundra.  Suddenly it flips over,
pinning you underneath.  At night the ice weasels come.  --Nietzsche

------------------------------

From: FIT <[EMAIL PROTECTED]>
Subject: Re: is there a package for linux(rh6.0) to allow viewing of 
Date: Thu, 26 Aug 1999 09:39:51 +0200
Reply-To: [EMAIL PROTECTED]

Dan,

have a look at applixware (in its most current version). Be warned, its
$$$, but as I think its worth every $. I use it heavily to read these
darn M$ Word documents that some people use to attach to their emails
and it always did an excellent job.

Arno

dan wrote:

> does linux have a package for viewing powerpoint files (.ppt)
> i would HATE to have to load windows on my system to be
> able to view these files
> thanks in advance,
> dan

--
Functional Imaging Technologies GmbH
Siemensstr. 40/41
12247 Berlin
Germany

fon.: +49 (0)30 76 90 24 80
fax.: +49 (0)30 76 90 24 81

mailto:[EMAIL PROTECTED]
htp://www.functional-imaging.com



------------------------------

From: FIT <[EMAIL PROTECTED]>
Subject: Re: does linux have a package for drawing block diagrams ?
Date: Thu, 26 Aug 1999 09:42:37 +0200
Reply-To: [EMAIL PROTECTED]

Dan,

You could try 'xfig'. It has a library with predifined objects for
drawing flowcharts. The library can be loaded from 'xfig' s toolbar.

Arno

dan wrote:

> i need to be able to draw block diagrams, data flow diagrams, etc
> to document the software i write for work (bummer!)
> is there a software package for linux (rh6.0) that does that sort of
> thing ?
>
> thanks,
> dan

--
Functional Imaging Technologies GmbH
Siemensstr. 40/41
12247 Berlin
Germany

fon.: +49 (0)30 76 90 24 80
fax.: +49 (0)30 76 90 24 81

mailto:[EMAIL PROTECTED]
htp://www.functional-imaging.com



------------------------------

From: [EMAIL PROTECTED] (Tuomo Pyhala)
Crossposted-To: comp.security.unix
Subject: Re: PROPOSAL: A secure, simple NIS replacement
Date: Thu, 26 Aug 1999 06:00:45 GMT

[[EMAIL PROTECTED] wrote...]
>One of the problems with SMB though, is that it is unroutable.  

You can run SMB on top of NetBEUI, which is _not_ routable, and on
top of tcp/ip which is actually rather routable.


------------------------------

From: Darryl Bryant <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.hardware,redhat.hardware.arch.intel
Subject: Re: I HATE LT WIN MODEM!!!!!!!!!!!!!!!
Date: Thu, 26 Aug 1999 16:28:19 +1000

george wrote:
> 
> Not to be rude, but Win modems do not work under Linux.  Hence the name "Win"
> modem - they only work under Windows.  This is because the hardware
> manufacturer was very cheep and decided that rather than add the extra
> components to make it a real modem, they would supply drivers - for windows
> only - to make the modem work.
> 

yep, and the drivers are all different for each brand of winmodems, if they
stuck to an agreed standard we may have seen these winDog modems working in
linux, but no such luck!

dAz

------------------------------

From: [EMAIL PROTECTED] (Tuomo Pyhala)
Crossposted-To: comp.security.unix
Subject: Re: PROPOSAL: A secure, simple NIS replacement
Date: Thu, 26 Aug 1999 06:05:47 GMT

[[EMAIL PROTECTED] wrote...]
>
>
>  [EMAIL PROTECTED] (Jonathan Abbey) wrote:
>
>> There have been several NIS-type ideas implemented... NIS, NIS+,
>> Kerberos/Hesiod, and the netinfo stuff that NeXT used.  We still use
>> NIS for almost everything because of the ubiquity of it, but a lot of
>> people are moving to LDAP for this sort of thing.
>
>NIS, NIS+, Kerberos/Hessiod and LDAP all have the same problem. I
>already have a user list on my system in some fashion. Its either in the
>passwd file, or broken out (e.g. shadow passwords), and I don't WANT to
>maintian another database.

Depending on the systems mentioned above, one might be able to convert the
database to such form. I would suppose that normal unix user-database
would be rather easily convertable into nis-database or ldap-directory
data. Kerberos would tougher.


------------------------------

From: "Christopher R. Thompson" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
Date: Thu, 26 Aug 1999 00:15:04 -0700

FS wrote:
> 
> There are many more evil people who will choose the OS Gates than will choose
> the OS Jesus.
> 

They will be sorry they did.

------------------------------

From: David Schwartz <[EMAIL PROTECTED]>
Subject: Re: Custon Device Drivers
Date: Thu, 26 Aug 1999 00:06:06 -0700

Grant Edwards wrote:
> 
> In article <[EMAIL PROTECTED]>, David Schwartz wrote:
> >
> >Grant Edwards wrote:
> 
> >> It could be that most of the "value" they're selling is in the
> >> driver, not in the hardware.  If they publish sources to the
> >> driver, somebody else can come up cheap, compatible hardware,
> >> and then they've got no product.
> >
> >       Why then wouldn't they be willing to provide the source to their
> >customers, licensed for exclusive use with their hardware? The usual
> >reason is simply that the driver is so poorly written that they're too
> >embarrased.
> 
> Or that management is just worried about letting trade secrets
> out.  Copyright only protects one particular expression of an
> algorithm -- not the algorithm itself.  If it's not patentable,
> then your only option is "trade secret" protection -- and then
> you pretty much can't publish it (even under license agreements).

        Ah yes, the secret driver. Perhaps their driver does provide some
incredible secret extra feature that nobody else's does. If this is the
case, why not release a 'bare bones' driver in source form. I'll bet you
dollars to donuts that if you do this, within a few months will appear a
driver with that incredible secret extra feature.

        The open source community is not lazy.  

> >       But let me ask another question: Do you plan to release the hardware
> >specifications of the board so that your customers could write their own
> >driver if they chose to?
> 
> Firstly, I'm not involved and am not associated with those who
> are, I'm just speculating as to their reasons.  Second, it's
> not at all unusual for a HW vendor to not release specs.  One
> would hope that they would realize by now that not releasing
> specs just limits their market.

        Ahh, so the hardware is super-secret. So secret even the customers
can't know what they're buying. And the software is secret too.

> >If not, why not?
> 
> Same as the answer about source code.  Management doesn't want
> to let out what they think are valuable trade secrets.  Whether
> these "secrets" are actually secret or worth protecting, or
> whether letting them out increases or descreases teh potential
> market is always up for debate.

        If you keep secrets, one of two things will happen:

        1) Nobody will care. Your product will not get the market you want.

        2) Somebody will reverse-engineer your product.

        Keeping secrets increases everyone's motivation to reverse engineer
your product. It also gives your competitors an incentive to create a
competing open product.

> >If so, then if your board is
> >at all popular, someone else will probably write a driver anyway, and
> >people will prefer it over yours because they'll get the source to the
> >other driver.
> 
> Exactly.  My opinion is that if people out there are willing to
> donate time to write drivers for your hardware, you'd be stupid
> not to take advantage of the offer.

        Agreed. So the answer is "this is stupid, don't do it".

        DS

------------------------------

From: David Schwartz <[EMAIL PROTECTED]>
Subject: Re: [kernel] how to measure running time in nanosecond?
Date: Thu, 26 Aug 1999 00:08:04 -0700


        There's a lot of problems with this including at least:

        1) It will break horribly on SMP systems.

        2) It will break horribly on CPUs that don't have a cycle counter.

        3) It will provide, at best, 100ppm accuracy.

        DS

Hee-Chul Yun wrote:
> 
> Mark Hahn <[EMAIL PROTECTED]> wrote:
> >>      Use Linux-2.2.11 and then add Ulrich Windl's 'NANO' patches. You can
> 
> > there's no reason to use any particular kernel or patches.  the following
> > provides ultimate resolution; calibrating it (finding secondsPerTick)
> > is pretty trivial:
> 
> > typedef unsigned long long u64;
> 
> > inline u64
> > rdtsc() {
> >     u64 clock;
> >     __asm__ __volatile__("rdtsc" : "=A" (clock));
> >     return clock;
> > }
> 
> more simple way is to use 'get_cycles()' function.
> which is defined in <asm/timex.h> and that function use 'rdtsc' as you
> know..
> 
> --
> 
>         Hee-Chul, Yun                 e-mail: [EMAIL PROTECTED]
>         KAIST CS Dept, CA Lab.        Phone : 5552(Lab), 017-755-9413

------------------------------

From: "Little Rascal" <[EMAIL PROTECTED]>
Subject: Re: high speed floating point coprocessor
Crossposted-To: comp.os.linux.hardware,comp.os.linux.misc
Date: Thu, 26 Aug 1999 07:17:07 GMT



[EMAIL PROTECTED] wrote in article
<[EMAIL PROTECTED]>...
> Would it be possible to utilize a 3dfx 3d-accelerator as
> a high speed floating point coprocessor, not necessarily 
> for displaying anything?
>
I am curious why you would want to??? You already have one in the cpu that
handles that job and quite well. 
   Rascal
 

------------------------------

From: "Christopher R. Thompson" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
Date: Thu, 26 Aug 1999 00:20:39 -0700

Stuart Fox wrote:
> 
> Christopher R. Thompson <[EMAIL PROTECTED]> wrote in message
> news:[EMAIL PROTECTED]...
> > Paul E. Lehmann wrote:
> > >
> > > Hmmm,
> > >
> > > Ok, Lets see.  Jesus was one of many so called "Healers and Messiahs" of
> his
> > > day"
> >
> > Have YOU NOT seen miracles and healing? Is that his fault, or your own?
> 
> There is plenty of evidence that so called miracles of Jesus were nothing
> more than breaking societies norms of the time.
>
 
I could agree with that.

> >
> > > If you believe that such an individual actually existed then it can be
> said
> >
> > I do. You hear his name every day many times a day. How can it possibly
> > be a figment of so many peoples imaginations. I think your mind is
> > playing tricks on you!
> 
> He almost certainly existed, and there were almost certainly two of him
> (Jesus and his brother James)
> >
> > > been gay, practiced the arts of a magician and had extreme contempt for
> non
> >
> > Not possible and totally inaccurate.
> > Christians are not allowed to look to magicians, scientists,
> > astrologers, soothsayers, etc, for any kind of direction or indirection
> > but to GOD only.
> 
> There is also plenty of evidence that the whole religion is based on
> Egyptian religion.  But you knew that because you've researched this
> thoroughly?

I'm not really interested in Egyptology all that much. Is there
something importatnt that I should be aware of?

> Have a look at all the books that didn't make it into the Bible because they
> didn't toe the party line.

Would you post the books on the Internet. I don't have access to them.

------------------------------

From: "Christopher R. Thompson" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
Date: Thu, 26 Aug 1999 00:13:56 -0700

Tim Kelley wrote:
> 
> "Christopher R. Thompson" wrote:
> >
> > Paul E. Lehmann wrote:
> 
> > > If you believe that such an individual actually existed then it can be said
> >
> > I do. You hear his name every day many times a day. How can it possibly
> > be a figment of so many peoples imaginations. I think your mind is
> > playing tricks on you!
> 
> Ahh yes, the little voices in your head.  Telling you to spam
> newsgroups yelling about god and other fairies.  *My* mind is
> playing tricks on me?
>
 
I wondered about that too. The voices where do they come from? 

> >> that he was rather fond of the juice of the grape, could quite possibly have
> >
> > St. MaT 11:18 "The Son of man came eating and drinking, and they say,
> > Behold a man gluttonous, and a winebibber, a friend of publicans and
> > sinners. But wisdom is justified of her children." Jesus speaks for
> > himself. See also Mt 9:10 and Luke 7:34
> >
> > > been gay, practiced the arts of a magician and had extreme contempt for non
> >
> > Not possible and totally inaccurate.
> > Christians are not allowed to look to magicians, scientists,
> > astrologers, soothsayers, etc, for any kind of direction or indirection
> > but to GOD only.
> 
> Where is it in the bible that jesus had sex?  Why didn't he?
>

First question: I don't know. Second: How can we know?
 
> --
> Tim Kelley
> [EMAIL PROTECTED]

------------------------------

From: "Christopher R. Thompson" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
Date: Thu, 26 Aug 1999 00:45:47 -0700

Frank Sweetser wrote:

> heck, is that all you're looking for?  search for GFS at freshmeat.net
>
 
Thanks much I'm getting it now.

------------------------------

From: "Leonzo E. Miller III" <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.development.apps
Subject: How To; SmartWare & Linux
Date: Thu, 26 Aug 1999 04:27:16 -0400

http://smartware2000.com/howto/

--
Integrated Information Solutions    http://www.logosnet.net
SmartWare 2000 PLUS!              You've tried the rest!
Voice: (954) 360-0538                 Text: [EMAIL PROTECTED]



------------------------------

From: "Christopher R. Thompson" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS
Date: Thu, 26 Aug 1999 00:29:17 -0700

>  - Ed Pizzi

Yeah! What he said!

------------------------------

From: "Christopher R. Thompson" <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux,comp.os.linux.advocacy,comp.os.misc,comp.unix.advocacy
Subject: Re: Jesus: the ultimate OS - Please Go Away
Date: Thu, 26 Aug 1999 00:26:04 -0700

Eric Hegstrom wrote:
> 
> Isn't there some sort of alt.religion.whine.whine.whine or some other
> such group where this stuff should go to (I hear alt.religion.kilbology
> may be fitting).
> 
> I guess I should shut up and use my killfile, but I think many regular
> readers/posters of this group read these groups because they have
> something to do with computers (hence the "comp." prefix).
> 
> I would like to make a personal request that you take this intolerant
> bickering to some group that cares so we can get back to some real
> arguments over things like why did the PCI kernel calls change so much
> from 2.0.x to 2.1.x or why can't I write directly to the BIOS in Linux
> and other at least remotely computer things.
> 
> Sorry to vent (I've been dealing with USWest all afternoon).
> 
> Cheers,
> Eric

No Problem. I don't know who started all of this but all I'm interested
is in getting a parallel I/O system running. And if the original poster
would post some specs on that other system... I would be happy to
discuss that as well.

I don't have time for all that religion stuff anyway until they can
produce some specs.
 
> 
> "Christopher R. Thompson" wrote:
> >
> > Paul E. Lehmann wrote:
> > >
> > > Hmmm,
> > >
> > > Ok, Lets see.  Jesus was one of many so called "Healers and Messiahs" of his
> > > day"
> >
> > Have YOU NOT seen miracles and healing? Is that his fault, or your own?
> >
> > > If you believe that such an individual actually existed then it can be said
> >
> > I do. You hear his name every day many times a day. How can it possibly
> > be a figment of so many peoples imaginations. I think your mind is
> > playing tricks on you!
> >
> > > that he was rather fond of the juice of the grape, could quite possibly have
> >
> > St. MaT 11:18 "The Son of man came eating and drinking, and they say,
> > Behold a man gluttonous, and a winebibber, a friend of publicans and
> > sinners. But wisdom is justified of her children." Jesus speaks for
> > himself. See also Mt 9:10 and Luke 7:34
> >
> > > been gay, practiced the arts of a magician and had extreme contempt for non
> >
> > Not possible and totally inaccurate.
> > Christians are not allowed to look to magicians, scientists,
> > astrologers, soothsayers, etc, for any kind of direction or indirection
> > but to GOD only.
> >
> > > Jews.  Are you sure you want to name your OS after JC?  Just think of the
> > > many many cruelities that were / are commited in "His" name.  You may be
> >
> > A knowlegeable person would know better. Just because someone says "I am
> > christian" does not necessarily mean that the ultimate authority "Jesus"
> > agrees. But I guess that you would have to ask Jesus to know that,
> > wouldn't you. Anyone commiting cruelties "in his name" is EVIL and was
> > put there just to give you some demented rationalization for your
> > statement. Make the right choice. Read and Learn.
> >
> > > better off to name your OS after some scientific fact as opposed to
> > > witchcraft and superstition.
> > >
> > > I know that many consider their OS a religion but aren't you going a bit
> > > far?
> >
> > I'll have gone to far when my daemons become angels.
> >
> > >
> > > Christopher R. Thompson <[EMAIL PROTECTED]> wrote in message
> > > news:[EMAIL PROTECTED]...
> > > > Vladimir Z. Nuri wrote:
> > > > >
> > > > > an HTML version of this article can be found at:
> > > > >
> > > > >    http://www8.pair.com/mnajtiv/tao.html
> > > > >
> > > >
> > > > I'm going to name my OS "Jesus". It will coded primarily to destroy all
> > > > "EVIL" objects os's and computers. Only the objects that "LOVE" Jesus
> > > > will survive and communicate with "Jesus".
> 
> --
> Eric Hegstrom                          .~.
> Senior Software Engineer               /V\
> Sonoran Scanners, Inc.                // \\          L I N U X
> [EMAIL PROTECTED]        /(   )\  >don't fear the penguin<
> 520-617-0072 x402                     ^^-^^

------------------------------

From: [EMAIL PROTECTED] (Peter Samuelson)
Subject: Re: what about SGI's xfs?
Date: 26 Aug 1999 04:40:56 -0500
Reply-To: Peter Samuelson <[EMAIL PROTECTED]>

[Christopher Browne <[EMAIL PROTECTED]>]
> > > ACLs may provide the ability to more precisely "tie down"
> > > security than is possible with UGO; it is not, however, obvious
> > > that there are good usage models available to make them usable.

ACL's are hardly a new concept; there are plenty of "sample
implementations" from other operating systems.  I think the problem is
not really a dearth of experience with them so much as the fact that
there are indeed several implementation approaches and they are more or
less mutually exclusive.  (Practically, if not in strict technical
fact.)

> Inheritance is a good one; the overall thinking on how to apply ACLs
> to (let's say) a Linux distribution as a whole is the other one.

I would argue that inheritance and the ability to "hard-link" an ACL
between files is rather important; however, the question of how to
apply them to a distribution as a whole seems to me to be less
important.  Distributions are getting along fine without ACL's now; I
foresee that if and when ACL's become available, that they will be used
primarily by individual administrators and users rather than set up as
defaults by a distribution.  I guess I feel about ACL's the way Bjarne
feels about multiple inheritance (as someone posted in the C++ thread
recently): you really don't need them very often but when you do need
them they are *really* helpful.

Note that NT uses quite a few ACL's when it sets up its default system
directory -- but only because it has no other security model like UGO.
(Also note that NT lets you install to a FAT partition if you want, and
doesn't even warn you very loudly when you do, proving that they are
not as serious about security as they would have us believe....)

>   - What to secure?
>   - Why it needs to be secured?
>   - How to most appropriately secure it?
> An intelligent use of inheritance will be real crucial to this.

Regarding this: as I said above, in my view the first two questions can
be best answered on a case-by-case, site-by-site basis.  Since unlike
NT we won't be relying on ACL's as our *only* or even *primary*
security mechanism, my feeling is that they will be used relatively
rarely.  I've used and admin'd AIX boxes every day for the past three
years, yet for what we do here I have yet to actually feel the need to
set up a single ACL.  Groups seem to work fine for our usage patterns.

> The other problem is that a prototype in hand tends to be worth three
> or more in the bush; once one alternative gets prototyped, there is
> likely to be a fair bit of pressure to pick that approach.

Definitely, especially since (as I noted before) a prototype in this
case is somewhat non-trivial.  I suppose the prototype could probably
get away with just the ext2 and vfs implementations plus a couple tools
that do the ioctls or whatever; patching cp and tar could wait.  Would
that be enough for people to use to intelligently evaluate whether they 
like the approach?

What have the commercial Unices done?  I am only passingly familiar
with ACL's on Solaris and AIX.  Did they each roll their own, or is
there a standard/de facto standard they followed?  What I'm thinking
here is that when Heinz Mauelshagen went to do his LVM, he got his
design and interface from HP/UX rather than designing from the ground
up which would have been a lot more work and a lot more risk of doing
something cumbersome or otherwise silly.

-- 
Peter Samuelson
<sampo.creighton.edu!psamuels>

------------------------------

From: Peter Pointner <[EMAIL PROTECTED]>
Subject: Re: does linux have a package for drawing block diagrams ?
Date: Wed, 25 Aug 1999 23:59:04 GMT

dan <[EMAIL PROTECTED]> wrote:
> i need to be able to draw block diagrams, data flow diagrams, etc
> to document the software i write for work (bummer!)
> is there a software package for linux (rh6.0) that does that sort of
> thing ?

... and if not, you will start development of a kernel module that 
does that?
Or why else do you post this question to comp.os.linux.development.system?

Peter
(who couldn't resist)


------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.development.system) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Development-System Digest
******************************

Reply via email to