porting CCAPI to UNIX

Nicolas Williams Nicolas.Williams at sun.com
Wed May 9 16:05:51 EDT 2007


On Wed, May 09, 2007 at 12:31:12PM -0700, Russ Allbery wrote:
> Nicolas Williams <Nicolas.Williams at sun.com> writes:
> 
> > In particular I get the impression that Ken needs something stronger
> > than Linux keyrings and AFS PAGs have tended to provide: cross-session
> > process isolation.
> 
> AFS PAGs provide cross-session process isolation (well, not from root, but
> that's a different matter).  I was actually under the impression that
> keyrings did as well.

So processes in one of a user's sessions cannot trace the same user's
processes in other sessions?



More information about the krbdev mailing list