site_archiver@lists.apple.com Delivered-To: darwin-dev@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=vJsonORNn4D9LiD/EcFNXSRWaAXLejNzYPS4Bbhekyg=; b=XGSAGkUMbdsOW0Md/GomnvknQ2DNgVoNeOm6cmJ8R2KSCtD31AbB2IIfYma5i4/5Fb EvqVbMZb/NjIyuVc2cuLiH3YOH7+57Wue/r9UuZ7R3P0BFBpCW6nh4VHpeKA5cSj3GV1 pH158V6tGsDPPTDUsI6MqWZP64GqBbHefs5FA= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=weiS91Kmb0ZTZPI9zM5ggGgPXLY9TeyuRZEJMu7PvknGWs3bsBu5fWAEZnoJvDVjLG aciQAQxzMTmU0t+MQftqLoLuaMckMoteK7C7vts0O7zLeSAnRJ6S1YpZeYaMvOosQ8ce a8WmQUdipjWdT//E2t9dC/ovdNOU6BgisEqWk= On Thu, Jul 30, 2009 at 12:49 PM, Brian Mastenbrook<brian@mastenbrook.net> wrote:

On Jul 30, 2009, at 1:45 PM, Terry Lambert wrote:

...

Given your description of your problem space, you don't need partitioning of additional resource namespaces for security reasons, so you could simply use chroot instead and handle it as a filesystem/security identifier  namespace issue.

IANAL, but if you do decide to go down this route keep in mind that from a license perspective chroot is the same as virtualization,

Huh? chroot() is nothing like virtualization. In no way does it involve running (or even installing) multiple copies of the OS. With that in mind, the rest of your post is moot. -- Clark S. Cox III clarkcox3@gmail.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.appl... This email sent to site_archiver@lists.apple.com