From: Herbert P÷tzl (herbert_at_13thfloor.at)
Date: Sat 09 Aug 2003 - 01:03:57 BST
let's assume each file and directory carry a tag which
says "this is a file of context N", where N is the context
number of a virtual server.
let's further assume a file or directory can only be in one
context at one time (e.g. it has only one such tag)
would you like:
1) if the almighty context zero/one modifies files
of another context ...
a) the files/dirs to keep their context?
b) the files/dirs change to context zero?
2) if a program of context N encounters a file of
context M, where N != M ...
a) on modify change the file to the new context?
b) do not allow access to files from other contexts
except context zero/one?
c) allow modification while keeping the file
in its 'original' context?
3) consider a program creating a (hard)link to a file
in another context (including zero/one), should ...
a) the file change to the 'new' context?
b) the file keep the old context?
c) this operation be disallowed?
4) consider a program removing a link to a file with
more than one links, should the remaining links ...
a) be still 'owned' by the removing context?
b) be changed to context zero/one?