|
|
Up |
|
|
  |
Author: Eris DiscordiaEris Discordia Date: Aug 20, 2008 14:59
Thank you, sqweek. The second golden Golden Apple with καλλιστι on
it is totally yours. The first one went to Russ Cox.
> You don't care who mounts what where, because the rest of the system
> doesn't notice the namespace change.
So essentially there shouldn't be a problem with mounting on a single
"public" namespace as long as there is one user on the system. mount
restriction in UNIX systems was put in place because multiple users exist
some of whom may be malicious. Virtualization and jailing will relax that
requirement.
> As Pietro demonstrated, no interface configuration is necessary here.
Only because the concept is hidden in Plan 9, though I don't know how.
_Someone_ or _something_ has to decide whether to route your packets
through, say, a ppp interface or an eth interface--when both interfaces are
present--and to do that according to configuration. That won't happen on
its own.
|
| Show full article (11.41Kb) |
|
| | 16 Comments |
|
  |
Author: Pietro GagliardiPietro Gagliardi Date: Aug 20, 2008 15:44
I'm sorry, but this needs a comment.
On Aug 20, 2008, at 5:46 PM, Eris Discordia wrote:
>> As Pietro demonstrated, no interface configuration is necessary here.
>
> Only because the concept is hidden in Plan 9, though I don't know
> how. _Someone_ or _something_ has to decide whether to route your
> packets through, say, a ppp interface or an eth interface--when both
> interfaces are present--and to do that according to configuration.
> That won't happen on its own.
The program does so. What happens is the program sets up a 9P server
that runs in the background as a background process. It takes care of
everything. The user never needs to actually say "my cell phone is
interfacing off a proprietary network" because the program will take
care of that. ftpfs, for instance, doesn't ask the user for port
number, ASCII/Binary mode, etc. More elaborate FTP programs do, and I
don't know why.
|
| Show full article (1.83Kb) |
|
| | no comments |
|
  |
Author: Benjamin HuntsmanBenjamin Huntsman Date: Aug 20, 2008 15:57
Suppose I want to have Windows clients be able to connect to their /usr/ share via SMB.
Plan 9 comes with aquarela, but from the man page, and my own testing, it apparently only calls 9fs where is whatever you type after the \, such that in my case:
\\myplan9server\benhu
will properly prompt for authentication, then execute '9fs benhu' which fails, obviously, since 9fs tries to contact the machine 'benhu', which doesn't exist. Is there another way around this, or would I need to modify /rc/bin/9fs to recognize subdirectories of /usr and mount them on /n just to make this work?
Thanks in advance!
-Ben
|
| |
| 6 Comments |
|
  |
Author: Steve SimonSteve Simon Date: Aug 20, 2008 16:01
The trick you want is in /rc/bin/service/startcifs - this may not be exactly
the code you want but it demonstrates the technique you need.
-Steve
|
| |
| 5 Comments |
|
  |
Author: Geoffrey AvilaGeoffrey Avila Date: Aug 20, 2008 16:17
Not (currently) a Plan 9 user, but I gotta chime in:
> It seems the security ascribed to disposable machines comes from that "user
> data" is stored on a different, presumably safer, machine in, for example,
> some sort of data warehouse at a data center. This isn't a new
> idea--actually, it's _very_ old--and it's not what happens in home (or
> personal) computing.
You're right; it isn't. Is that good or bad? What about in an office
environment? Same answer there?
>> Plan 9 respects that. Not trusting the hostowner is a waste of effort.
>
> Not with reliable biometric authentication, but that's out of scope here.
>
Way, way out of scope. Kinda like a fusion-powered terminal.
>
> Now, your home computer may be a true single user machine but you store
> _some_ authentication information on it anyway; those of yours, namely. Such
> machine is in that respect as vulnerable as a UNIX machine. It has to be
> _physically_ guarded. It's no more a "disposable" machine.
|
| Show full article (1.60Kb) |
| no comments |
|
  |
Author: Benjamin HuntsmanBenjamin Huntsman Date: Aug 20, 2008 16:16
>The trick you want is in /rc/bin/service/startcifs - this may not be exactly
>the code you want but it demonstrates the technique you need.
>
>-Steve
That gets me a hair closer. \\myplan9server\local is still empty after using startcfs, though executing
9fs local
ls /n/local
gives me a listing of the filesystem as it should... am I missing something?
Thanks much!!
-Ben
|
| |
| 3 Comments |
|
  |
Author: Steve SimonSteve Simon Date: Aug 20, 2008 16:21
the correct namespace I would guess, you did do the import before you started cifs?
I think you should be able to connect to \\myplan9server\root implying 9fs root,
though this is just your fossil file system, so /dev/ will be fairly empty.
-Steve
|
| |
| 2 Comments |
|
  |
Author: Benjamin HuntsmanBenjamin Huntsman Date: Aug 20, 2008 16:35
>the correct namespace I would guess, you did do the import before you started cifs?
What is there to import? I did this from the cpu/auth/fs server console: /rc/bin/service/startcifs
>I think you should be able to connect to \\myplan9server\root implying 9fs root,
>though this is just your fossil file system, so /dev/ will be fairly empty.
>
>-Steve
I'd thought it should be \\myplan9server\local
should do a '9fs local' and give me the contents of /
I might end up modifying startcifs or 9fs after all... :)
Thanks!
-Ben
|
| |
| no comments |
|
  |
Author: Benjamin HuntsmanBenjamin Huntsman Date: Aug 20, 2008 16:46
>the correct namespace I would guess, you did do the import before you started cifs?
Hmm... I used consolefs to the /srv/fscons to add srv -A test
then as my user I could do \\myplan9server\test and get the root of the drive.
Looks like a namespace issue after all.
However, might this prevent users from all connecting to the system, unless I add a /srv/ entry for every user who might connect...?
Thanks!
-Ben
|
| |
| no comments |
|
  |
|
|
  |
Author: UrielUriel Date: Aug 21, 2008 00:49
On Wed, Aug 20, 2008 at 11:46 PM, Eris Discordia
gmail.com> wrote:
> Thank you, sqweek. The second golden Golden Apple with καλλιστι on it is
> totally yours. The first one went to Russ Cox.
>
>> You don't care who mounts what where, because the rest of the system
>> doesn't notice the namespace change.
>
> So essentially there shouldn't be a problem with mounting on a single
> "public" namespace as long as there is one user on the system. mount
> restriction in UNIX systems was put in place because multiple users exist
> some of whom may be malicious. Virtualization and jailing will relax that
> requirement.
Mount restrictions on unix are needed (among other reasons) because of
a broken security model (ie., suid).
|
| Show full article (5.39Kb) |
| 5 Comments |
|
|
|
|