Re: Shill: capability-based shell
Bill Frantz <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <r422Ps-1075i-7EC09680131745FEAD49EDDD7F641DE8@Williams-MacBook-Pro.local> |
On 9/25/14 at 9:45 AM, [email protected] (Scott Moore) wrote: >Hi all, >I'm part of the team working on Shill. I'm happy to answer any questions >and we're very excited to hear what cap-talk thinks! >Cheers, >Scott > >On Thursday, September 25, 2014, Tony Arcieri <[email protected]> wrote: > >>Apologies if this has been discussed before but It's New To Me(TM), and >>relevant to the recent "Shellshock" escapades with bash: >> >>http://shill.seas.harvard.edu/ >> >>-- >>Tony Arcieri In looking at your paper <http://shill.seas.harvard.edu/shill-osdi-2014.pdf>, figure 1, it appears that the grade instance has full write access to the grade_log. I interpret this to mean that a student program could overwrite or otherwise corrupt the grade_log. This is similar to the problem Norm Hardy addressed with his "Confused Deputy" paper. Don't get me wrong. I think Shill is addressing many of the right issues, is a useful contribution, and the above issue could be addressed in several ways within the Shill system. Cheers - Bill ----------------------------------------------------------------------- Bill Frantz | Truth and love must prevail | Periwinkle (408)356-8506 | over lies and hate. | 16345 Englewood Ave www.pwpconsult.com | - Vaclav Havel | Los Gatos, CA 95032