Hi, I should add an example.
Flexibility requires that a user can share a file with another user (if system policy allows it). Security requires that he can do so safely, and revocably. Awareness requires that the user knows when he shares, and what the consequences are with regards to resource consumption, etc. For example, the user could initiate the sharing by dragging a dialog box to a "share with joe" window. Once the file is dropped, a window pops up that informs the user about the consequences of sharing the file with joe, and offers the option to set a file size limit (and maybe a scheduler limit). The user also is educated that he can later revoke the shared resource by dragging/deleting the shared link in the window. The components mediating the sharing in this way are part of the user's TCB, the interactive shell. Thanks, Marcus _______________________________________________ L4-hurd mailing list [email protected] http://lists.gnu.org/mailman/listinfo/l4-hurd
