Linked by Thom Holwerda on Wed 27th May 2009 14:59 UTC, submitted by R_T_F_M
FreeBSD's jails technology received an interesting new feature. "Add hierarchical jails. A jail may further virtualize its environment by creating a child jail, which is visible to that jail and to any parent jails. Child jails may be restricted more than their parents, but never less. Jail names reflect this hierarchy, being MIB-style dot-separated strings."
Thread beginning with comment 365713
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
Member since:
2006-03-01
it's not that it's hard, but it's a kind a distinction that the reader could not intuitively guess on his own, when one comes to osnews after seeing normal, and web based press, articles being grouped by relevance or topic, for a long time...
or, one may infer it after seeing all page 1 articles having a submitter comment and page 2 ones not having one, but unless one reads about it in a post from one osnews editor, one may think it's a sort of coincidence and not "the" reason - and an arbitrary and somewhat illogical distinction after knowing the rationale for it
personally i don't care much about it, although i found having to scan both page 1 and page 2 for interesting things on each visit, less confortable than before - but i'd humbly ask not to get too mad at those who come up with it...
sorry for the OT
back to the topic, this reminds me of NT 's ( win 2k and later) filtered tokens, in that the token belonging to a process (and initially coming with the same priviilege bits of the user who started the process) can be filtered to create a derived token with some or all privileges removed
although this appears to be less sophisticated (and complex) than nt's implementation, it's an interesting addition indeed...
Edited 2009-05-27 21:26 UTC