Re: [Savannah-hackers] submission of Plash - savannah.nongnu.org

[Jonathan Gonzalez V.]

address@hidden writes:

Hi Mark Seaborn,

I'm evaluating the project you submitted for approval in Savannah.

I reviewed your source code and you have the Copyright and License
Notices missing in all files, consider to fix this. Keep in mind that
any file more than ten lines long should carry on a Copyright and
License Notices. You have the 'COPYING' file missing too, fix this
too. These issue are explained in the GPL-Howto, you can read it here:

     http://www.gnu.org/licenses/gpl-howto.html

In order to avoid any confusion with the Copyright and License
Notices, please read these URLs:

     http://www.gnu.org/prep/maintain/html_node/Copyright-Notices.html
     http://www.gnu.org/prep/maintain/html_node/License-Notices.html

If you are willing to make the changes mentioned above, please provide
us with an URL to an updated tarball of your project.  Upon review, we
will reconsider your project for inclusion in Savannah.

Regards,

> A package was submitted to savannah.nongnu.org
> This mail was sent to address@hidden, address@hidden
>
>
> Mark Seaborn <address@hidden> described the package as follows:
> License: gpl
> Other License: Also LGPL for the parts that are linked into GNU libc.
> Package: Plash
> System name: plash
> Type: non-GNU
>
> Description:
> Plash is "the Principle of Least Authority Shell".
>
> Plash is a Unix shell which lets you run Unix programs with access only
> to the files and directories they need to run.  Programs are given
> access to files which were passed as command line arguments.
>
> In order to implement this the filesystem is virtualised.  Each
> process can have its own namespace -- its own root directory -- which
> can contain a subset of your files.
>
> This is implemented by modifying GNU libc and replacing the system
> calls that use filenames.  For example, open() is changed so that it
> sends a message to a file server via a socket.  If the request is
> successful, the server sends the client a file descriptor via the
> socket as a result.  Processes are run as the user `nobody', and in a
> chroot jail, so that they can't access any files using the usual
> system calls, and must go through the file server instead.  This
> approach doesn't require modifying the kernel at all.
>
> http://www.cs.jhu.edu/~seaborn/plash/plash.html
> http://www.cs.jhu.edu/~seaborn/plash/plash-1.0.tar.gz
>

-- 
"Emacs the only editor which has its own church"

pgprMEC4lkbSK.pgp
Description: PGP signature