On Wed, May 17, 2006 at 01:56:48PM +0100, Sam Mason wrote: > On Sun, Apr 30, 2006 at 11:17:53PM +0200, Marcus Brinkmann wrote: > > Propose a use case for non-trivial confinement. > > How about the little (image) preview window that appears in some > graphical open file dialogs? > > To me this seems as though the application would pass a capability to > the open dialog naming a preview constructor in the calling application.
That is one way to implement it. Another is to pass the preview code itself (by reference, it shouldn't be copied if it isn't used). > Non-trivial confinement is needed because the open dialog doesn't trust > the calling program to not grant itself permission to the previewers > address space and to pull information out of it after the user has > selected a file. If you remove the "non-trivial", I agree. :-) I think this can easily be implemented using trivial confinement as well, though. Or am I missing something? Thanks, Bas -- I encourage people to send encrypted e-mail (see http://www.gnupg.org). If you have problems reading my e-mail, use a better reader. Please send the central message of e-mails as plain text in the message body, not as HTML and definitely not as MS Word. Please do not use the MS Word format for attachments either. For more information, see http://129.125.47.90/e-mail.html
signature.asc
Description: Digital signature
_______________________________________________ L4-hurd mailing list [email protected] http://lists.gnu.org/mailman/listinfo/l4-hurd
