Re: App control of linc/link part of ORBit2

[Michael Meeks <michael ximian com>]

Hi Jan,

On Fri, 2003-11-07 at 06:31, Jan Kratochvil wrote:
> Works like a charm now, thanks.

	I'm glad that's so - do get in touch if you need anything else.

	I don't know if you're going to be using this architecture long-term;
it certainly looks interesting. If you grab the latest HEAD gnome-vfs,
libbonobo, ORBit2 you'll see that we now have a 'Daemon' interface that
allows the full Stream API to be pulled out of process.

	There are several things that'd be great to have done in there, but
just having some more review of the API might help; and/or working out
if we could make it such that you could plug your stuff into a stock
GnomeVFS install without modifications.

	Interesting stuff,

	Regards,

		Michael.

> On Wed, 05 Nov 2003 13:08:02 +0100, Michael Meeks wrote:
> > On Tue, 2003-11-04 at 09:43, Jan Kratochvil wrote:
> > > I was successfuly using ORBit2 up to 2.6.0 to provide safe and clear RPC/API
> > > communication with part of code running in chroot(2)ed environment.
> ...
> > 	Wow - that sounds most interesting :-) what application was this for
> > specifically ?
> 
> http://www.jankratochvil.net/project/captive/doc/Details.html.pl#sandbox
> 
> The first full read/write free access to NTFS disk drives was achieved by using
> the original ntfs.sys driver. The emulated W32 environment running the original
> W32 filesystem driver is separated from the rest of UNIX OS to be restartable
> and secure. Sandboxing is provided by UNIX process with separate memory space,
> chroot(2), setuid(2), setrlimit(2) and CORBA/ORBit RPC.
> 
> Scheme:
> 	http://www.jankratochvil.net/project/captive/doc/dia/arch-all.png

> 
> 
> Regards,
> Lace
-- 
 michael@ximian.com  <><, Pseudo Engineer, itinerant idiot