From 9e4fd6498585ef6d75974c7457fe0eee3f500036 Mon Sep 17 00:00:00 2001 From: GNU Hurd wiki engine Date: Sun, 19 Aug 2007 15:28:56 +0000 Subject: web commit by NealWalfield: Elide duplicated content. --- mechanism.mdwn | 24 ------------------------ 1 file changed, 24 deletions(-) diff --git a/mechanism.mdwn b/mechanism.mdwn index fdd98f07..ec694960 100644 --- a/mechanism.mdwn +++ b/mechanism.mdwn @@ -20,27 +20,3 @@ microkernels impose less policy than on Unix. A process is not policy free as it is possible to use other mechanisms to encapsulate a program instance, e.g., [[SFI]] and tainting ala [[Asbestos]]. - - -The Collaborative International Dictionary of English v.0.48 -defines a mechanism as: - -> The series of causal relations that operate to produce an -> effect in any system; as, the mechanism of a chemical -> reaction. - -This is, a mechanism is a function that produces some result. -As mechanisms determine the type of result, they necessarily -impose some [[policy]] (rules). Mechanisms that are referred -to as policy-free are those that minimally impose policy. - -A process can be used to encapsulate a program instance. On Unix, -a process is associated with a UID. This UID, in part, determines -what the process is authorized to do. On a [[microkernel]], -the policy that controls what resources a process may access -are realized separately. This may achieved through the use of -UIDs, however need not. Thus, the processes mechanism on such -microkernels impose less policy than on Unix. A process is not -policy free as it is possible to use other mechanisms to -encapsulate a program instance, e.g., [[SFI]] and tainting -ala [[Asbestos]]. \ No newline at end of file -- cgit v1.2.3