[Sugar-devel] Future of Rainbow + Sugar?

[Martin Langhoff]

On Wed, Feb 25, 2009 at 12:21 PM, Michael Stone <michael at laptop.org> wrote:
> For the record, "rainbow" only describes the userland privilege isolation
> part.

You're right. I conflated the overarching shadow of bitfrost with
rainbow. My bad.

> I think this would have the effect of making rainbow much less generic than
> it currently is.

I'm intrigued by your comment. Do you mean "less portable", and in
that case what kind of portability are you thinking of? selinux does
look more generic than rainbow...

And we don't have to go own the selinux path. Is smack simpler, more
appropriate to our needs?

As you say, selinux, smack and friends have moved forward a lot in the
last 2 years. Implementation/documentation/understanding of them has
matured enormously. Just having 'permissive' mode is a fantastic thing
when developing sw.

cheers



m
-- 
 martin.langhoff at gmail.com
 martin at laptop.org -- School Server Architect
 - ask interesting questions
 - don't get distracted with shiny stuff  - working code first
 - http://wiki.laptop.org/go/User:Martinlanghoff