On Tue, 13 Apr 2004 13:47:12 CDT, "John D. Heintz" said: > foo/nsa:permissions -> foo/nsa.gov/secure-linux/permissions > > This assumes a mapping from "nsa" -> "nsa.gov/security/". > > The characters up to the ':' would be looked up in a namespaces map, and > if found the substituion would occur before further name-> object > resolution. I don't think this breaks the goals set out in the "Future > Vision" white paper, but I guess that is exactly what I am asking you ;-)
This needs to be done *very* carefully, as all sorts of ugliness can result from a user being able to muck about with the mappings. Anybody who's ever used a VMS system and fiddled with the values of the various SYS$WHATEVER values knows what I mean - and yes, there were security holes caused by software that made the rash assumption that the SYS$FOO variables weren't altered by the user.....
pgp00000.pgp
Description: PGP signature
