diff options
author | GNU Hurd wiki engine <web-hurd@gnu.org> | 2007-08-19 15:28:56 +0000 |
---|---|---|
committer | GNU Hurd wiki engine <web-hurd@gnu.org> | 2007-08-19 15:28:56 +0000 |
commit | 9e4fd6498585ef6d75974c7457fe0eee3f500036 (patch) | |
tree | 159b4c886938fa4dadda8fa0879d9e38f92dfa6f | |
parent | e4d409899b8e7d27ead7c492380d1b87eebb5097 (diff) |
web commit by NealWalfield: Elide duplicated content.
-rw-r--r-- | mechanism.mdwn | 24 |
1 files changed, 0 insertions, 24 deletions
diff --git a/mechanism.mdwn b/mechanism.mdwn index fdd98f07..ec694960 100644 --- a/mechanism.mdwn +++ b/mechanism.mdwn @@ -20,27 +20,3 @@ microkernels impose less policy than on Unix. A process is not policy free as it is possible to use other mechanisms to encapsulate a program instance, e.g., [[SFI]] and tainting ala [[Asbestos]]. - - -The Collaborative International Dictionary of English v.0.48 -defines a mechanism as: - -> The series of causal relations that operate to produce an -> effect in any system; as, the mechanism of a chemical -> reaction. - -This is, a mechanism is a function that produces some result. -As mechanisms determine the type of result, they necessarily -impose some [[policy]] (rules). Mechanisms that are referred -to as policy-free are those that minimally impose policy. - -A process can be used to encapsulate a program instance. On Unix, -a process is associated with a UID. This UID, in part, determines -what the process is authorized to do. On a [[microkernel]], -the policy that controls what resources a process may access -are realized separately. This may achieved through the use of -UIDs, however need not. Thus, the processes mechanism on such -microkernels impose less policy than on Unix. A process is not -policy free as it is possible to use other mechanisms to -encapsulate a program instance, e.g., [[SFI]] and tainting -ala [[Asbestos]].
\ No newline at end of file |