diff options
| author | Thomas Schwinge <tschwinge@gnu.org> | 2008-10-08 00:26:42 +0200 |
|---|---|---|
| committer | Thomas Schwinge <tschwinge@gnu.org> | 2008-10-08 00:26:42 +0200 |
| commit | f7cc93166ae25dc6936b7115f4196030c1eca288 (patch) | |
| tree | 0041ccc3b41647cbe220cd743e53c770f03d3317 /trust.mdwn | |
| parent | c27c0f96b9ca6898064d5bdbbc79c4475ee7c65a (diff) | |
| download | web-f7cc93166ae25dc6936b7115f4196030c1eca288.tar.gz web-f7cc93166ae25dc6936b7115f4196030c1eca288.tar.bz2 web-f7cc93166ae25dc6936b7115f4196030c1eca288.zip | |
UNIX.
Diffstat (limited to 'trust.mdwn')
| -rw-r--r-- | trust.mdwn | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -18,7 +18,7 @@ user. When we say that a program trusts another, we mean that [[correctness]] of the former depends on the cooperation of the latter. For instance, when a user runs ssh, the user's intention is that all communication is encrypted. In this case, -the user trusts that the ssh binary respects this intent. In Unix, a program's +the user trusts that the ssh binary respects this intent. In [[Unix]], a program's [[tcb]] consists not only of the kernel (and all the drivers, file systems and protocol stacks that it contains) but every program running under the same UID; it is impossible to protect against |