Re: [MirageOS-devel] Type enforced security

2015-09-16 Thread Hannes Mehnert
On 09/16/2015 14:46, Anil Madhavapeddy wrote: > Hannes, is there an example of how to run the nqsb-TLS trace checker > command-line tool anywhere? Not really (talking about https://github.com/hannesm/trace-checker). I 'documented' the dependencies in travis.yml (https://github.com/hannesm/trace-c

Re: [MirageOS-devel] Setting up multiple records in Jitsu

2015-09-16 Thread Magnus Skjegstad
On Wed, 16 Sep 2015, at 04:42, Matthew Bajor wrote: > Hi! I'm playing around with MirageOS + Jitsu and was having a hard > time finding the syntax for resolving multiple records/unikernels. The > config I'm using now to start it is: [...] I would like to add a few > more (sub)domains onto it if pos

Re: [MirageOS-devel] [opam-devel] Managing $PKG_CONFIG_PATH in opam

2015-09-16 Thread Anil Madhavapeddy
On 15 Sep 2015, at 12:50, Tim Cuthbertson wrote: > > On Tue, Sep 15, 2015 at 12:08 PM, Louis Gesbert > wrote: >> >>> I think we could definitely use an answer to pkg-config management, >>> but not one that's entwined into the core of OPAM itself. If something >>> could be figured out that fits

Re: [MirageOS-devel] Type enforced security

2015-09-16 Thread Anil Madhavapeddy
On 16 Sep 2015, at 12:35, Hannes Mehnert wrote: > > Hey, > > On 09/16/2015 11:12, Garrett Smith wrote: >> Is there an example in the Mirage codebase where the OCaml type system >> is used explicitly to enforce a security policy or behavior? This is a >> bit of a weird question, sorry, I'll expla

Re: [MirageOS-devel] Type enforced security

2015-09-16 Thread Hannes Mehnert
Hey, On 09/16/2015 11:12, Garrett Smith wrote: > Is there an example in the Mirage codebase where the OCaml type system > is used explicitly to enforce a security policy or behavior? This is a > bit of a weird question, sorry, I'll explain. > > I'm putting together a presentation on unikernels an

Re: [MirageOS-devel] Type enforced security

2015-09-16 Thread Richard Mortier
On 16 September 2015 at 11:12, Garrett Smith wrote: > I'm wondering if the OCaml type systems is (or could be) used to > enforce a various security baselines to help maintainers guard against > errant patches, features, etc. Is there a specific example I can point > to that highlights the advantag

[MirageOS-devel] Type enforced security

2015-09-16 Thread Garrett Smith
Is there an example in the Mirage codebase where the OCaml type system is used explicitly to enforce a security policy or behavior? This is a bit of a weird question, sorry, I'll explain. I'm putting together a presentation on unikernels and I'm looking over the various vulnerability patches in Op