diff options
| author | GNU Hurd wiki engine <web-hurd@gnu.org> | 2007-08-19 19:31:33 +0000 |
|---|---|---|
| committer | GNU Hurd wiki engine <web-hurd@gnu.org> | 2007-08-19 19:31:33 +0000 |
| commit | 04607ae234d083b96f5a2d8e6544cdc3ecd33047 (patch) | |
| tree | d1b64b715139db617dc38825c6a47fc61377d729 | |
| parent | ad096e2eb0da17b495cea524b1a1ee6ba42daa57 (diff) | |
web commit by NealWalfield: Fix link.
| -rw-r--r-- | trust.mdwn | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -9,7 +9,7 @@ When we say that a program trusts another, we mean that [[correctness]] of the former depends on the cooperation of the latter. For instance, when a user runs ssh, the user's intention is that all communication is encrypted. In this case, the user trusts that the ssh binary respects this intent. In Unix, a program's -[[trusted computing base|tcb]] consists not only of the kernel (and all the drivers, +[[tcb]] consists not only of the kernel (and all the drivers, file systems and protocol stacks that it contains) but every program running under the same UID; it is impossible to protect against [[DestructiveInterference]] from programs running under the same UID. |