[Dazuko-devel] TAF: trusting relatives

[John Ogness]

Hi,

This message is actually directed at Sami Tikka, but others may find it
interesting or want to give feedback. I have now added a "trusted_flags"
parameter to the dazukoRegisterTrusted() function. Currently there is
only one flag that could be used: DAZUKO_TRUST_RELATIVES.

Flags provided will show up in the dazuko_event structure for the
registered process (in the flags field). If the registered process
allows the trust request (and this flag was set), then all relatives of
the trusted process are also trusted.

What is a relative? A relative is any process sharing the same "root"
parent id. This can be other threads or forked processes of the trusted
process. It can even be a fork->exec process. This should provide
maximum flexibility.

At the moment this is only implemented for Linux 2.4 and is only
available in CVS:

$ env CVS_RSH="ssh" cvs -z3 \
-d:ext:address@hidden:/cvsroot/dazuko co dazuko

Here is a sample call when requesting trusted status and you want all
your relatives to also be trusted:

dazukoRegisterTrusted("mygroup", "mytoken", DAZUKO_TRUST_RELATIVES);

or if you only want your exact thread to be trusted:

dazukoRegisterTrusted("mygroup", "mytoken", 0);

I am interested in feedback for this.

@sami.tikka: This should be exactly what you have been looking for. I am
quite happy with how it has turned out. This can be very useful for
applications that use other external processes or helper-apps (and the
helper-apps are not Dazuko-aware).

John Ogness

-- 
Dazuko Maintainer