From e4d409899b8e7d27ead7c492380d1b87eebb5097 Mon Sep 17 00:00:00 2001 From: GNU Hurd wiki engine Date: Sun, 19 Aug 2007 15:07:19 +0000 Subject: web commit by NealWalfield: Create. --- mechanism.mdwn | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) (limited to 'mechanism.mdwn') diff --git a/mechanism.mdwn b/mechanism.mdwn index fb4c9d55..fdd98f07 100644 --- a/mechanism.mdwn +++ b/mechanism.mdwn @@ -10,6 +10,30 @@ As mechanisms determine the type of result, they necessarily impose some [[policy]] (rules). Mechanisms that are referred to as policy-free are those that minimally impose policy. +A process can be used to encapsulate a program instance. On Unix, +a process is associated with a UID. This UID, in part, determines +what the process is authorized to do. On a [[microkernel]], +the policy that controls what resources a process may access +are realized separately. This may achieved through the use of +UIDs, however need not. Thus, the processes mechanism on such +microkernels impose less policy than on Unix. A process is not +policy free as it is possible to use other mechanisms to +encapsulate a program instance, e.g., [[SFI]] and tainting +ala [[Asbestos]]. + + +The Collaborative International Dictionary of English v.0.48 +defines a mechanism as: + +> The series of causal relations that operate to produce an +> effect in any system; as, the mechanism of a chemical +> reaction. + +This is, a mechanism is a function that produces some result. +As mechanisms determine the type of result, they necessarily +impose some [[policy]] (rules). Mechanisms that are referred +to as policy-free are those that minimally impose policy. + A process can be used to encapsulate a program instance. On Unix, a process is associated with a UID. This UID, in part, determines what the process is authorized to do. On a [[microkernel]], -- cgit v1.2.3