First beta MattockFS

rmeijer <rmeijer-qWit8jRvyhVmR6Xm/[email protected]> Tue, 19 Jan 2016 16:52:06 +0100
Newsgroups gmane.comp.capabilities.general
Message-ID <[email protected]>
I think some of you may find this system interesting from an access 
control and accountability point of view. I just marked MattockFS as 
beta after my test code coverage reached 90%. MattockFS is a combination 
of a forensic data repository and a domain specific message bus for 
computer forensics data processing.

https://github.com/pibara/MattockFS

The thing some of you will probably object to is that MattockFS 
basically implements a read only variant of what in a programming 
language would be called pointer arithmetic. It combines this with 
privilege separated provenance logging and a sparse-cap interface for 
the message bus part and for initializing data (data is frozen after 
creation and is than made part of the flat globally accessible read-only 
image data address space).

Created this system as part of a research-project for a part-time study 
I'm currently doing. The main research topic was about page-cache miss 
avoidance in computer forensics frameworks, but being a capabilities nut 
I couldn't resist adding an access control and capabilities part to the 
project ;-) A thing that kinda messed up my time table resulting in me 
spending much more hours on the project than planned.

If anyone has any comments regarding the access control and privsep part 
of things, I'm very much open to any feedback in that regard. The main 
subject of my paper remains the page-cache part that is probably of less 
interest to you guys. Bug reports are also very welcome if you run in to 
any bugs ;-)

Regards,

Rob