TAF: trusting relatives
John Ogness <[email protected]>
| Newsgroups | gmane.linux.dazuko.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, This message is actually directed at Sami Tikka, but others may find it interesting or want to give feedback. I have now added a "trusted_flags" parameter to the dazukoRegisterTrusted() function. Currently there is only one flag that could be used: DAZUKO_TRUST_RELATIVES. Flags provided will show up in the dazuko_event structure for the registered process (in the flags field). If the registered process allows the trust request (and this flag was set), then all relatives of the trusted process are also trusted. What is a relative? A relative is any process sharing the same "root" parent id. This can be other threads or forked processes of the trusted process. It can even be a fork->exec process. This should provide maximum flexibility. At the moment this is only implemented for Linux 2.4 and is only available in CVS: $ env CVS_RSH="ssh" cvs -z3 \ -d:ext:[email protected]:/cvsroot/dazuko co dazuko Here is a sample call when requesting trusted status and you want all your relatives to also be trusted: dazukoRegisterTrusted("mygroup", "mytoken", DAZUKO_TRUST_RELATIVES); or if you only want your exact thread to be trusted: dazukoRegisterTrusted("mygroup", "mytoken", 0); I am interested in feedback for this. @sami.tikka: This should be exactly what you have been looking for. I am quite happy with how it has turned out. This can be very useful for applications that use other external processes or helper-apps (and the helper-apps are not Dazuko-aware). John Ogness -- Dazuko Maintainer