Re: awareness + flexibility + security

[Marcus Brinkmann]

Hi,

I should add an example.

Flexibility requires that a user can share a file with another user
(if system policy allows it).  Security requires that he can do so
safely, and revocably.  Awareness requires that the user knows when he
shares, and what the consequences are with regards to resource
consumption, etc.

For example, the user could initiate the sharing by dragging a dialog
box to a "share with joe" window.  Once the file is dropped, a window
pops up that informs the user about the consequences of sharing the
file with joe, and offers the option to set a file size limit (and
maybe a scheduler limit).  The user also is educated that he can later
revoke the shared resource by dragging/deleting the shared link in the
window.

The components mediating the sharing in this way are part of the
user's TCB, the interactive shell.

Thanks,
Marcus