lkml.org 
[lkml]   [1999]   [Dec]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Per-Processor Data Page
On Thu, Dec 09, 1999 at 04:32:31PM -0600, Bret Indrelee wrote:
> If processes can get a highly accurate time value from some sort of global
> clock, it allows a pair of processes to create a covert channel for passing
> information. The less secure program monitors the time variences of the
> high-security program in order to get information about or from them.

Linux simply does not support real compartmentation and probably never will.
It only makes sense on mainframes anyways, in the PC age you simply buy another
box and separate them with a 10 cm gap of air (patent pending) security border.
Complicating the OS is simply not worth it.



-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:55    [W:0.053 / U:1.120 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site