RE: Challenge: Find potential use cases for non-trivial confinement

[Christopher Nelson]

> On Mon, May 01, 2006 at 04:55:36PM -0600, Christopher Nelson wrote:
> > > This is getting annoying.  I wrote at least twice already 
> that the 
> > > primary space bank is *not* owned by the system 
> administrator.  It 
> > > is owned by the TCB, which is an entity itself.  It will restrict 
> > > access to it carefully, in particular it will not give 
> anyone (and 
> > > that includes the
> > > administrator) direct access to the prime space bank.
> > 
> > Ah, yes. Who owns the TCB?
> > Oh - no one. Cool. So who gets permission to update the TCB? 
> > Ah, of course, no one.  It's not like you ever need to 
> patch a piece 
> > of software, because all software is perfect once released.
> 
> No, it isn't, and yes, it may need to be replaced.  IMO this 
> should only be possible when the OS isn't running, but 
> mounted on a different system.
> Theoretically it can be done while it is running as well, of course.

Do not take this offensively, but don't you think it's a little silly to
require a person to mount the storage on another system before
upgrading?  Or do you mean that the upgrader would simply be the new
version of the OS, perhaps running off of a CD?

Still, patching an OS shouldn't require a reboot.  Not even MS requires
a reboot for most patches anymore.

-={C}=-