Re: Linux needs flexible security

sergey@memco.com
Fri, 19 Nov 1999 15:09:48 -0500


brandon@rhodesmill.org wrote:

>So I think that this architecture:
>
> (1) can be made to work today in user space
> (2) keeps all the complicated rules in user space
> (3) enables logging with logging mechanisms in user space
> (4) with a simple mechanism-only kernel patch, this architecture
> can run about as fast as any possible solution that keeps
> the complicated rules in user space

It takes two switch context for every trapped system called, isn't it ?
That would be tooooo slow. Especialy at multiprocessor system.
For example if you have N processors & N threads then every thread/processor
have to wait one thread-monitor on 1 processor. Not good.

Sergey

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/