[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Savannah-hackers] submission of Plash -

From: Jonathan Gonzalez V.
Subject: Re: [Savannah-hackers] submission of Plash -
Date: Wed, 08 Dec 2004 12:58:13 -0300
User-agent: Gnus/5.110003 (No Gnus v0.3) Emacs/21.3 (gnu/linux)

address@hidden writes:

Hi Mark Seaborn,

I'm evaluating the project you submitted for approval in Savannah.

I reviewed your source code and you have the Copyright and License
Notices missing in all files, consider to fix this. Keep in mind that
any file more than ten lines long should carry on a Copyright and
License Notices. You have the 'COPYING' file missing too, fix this
too. These issue are explained in the GPL-Howto, you can read it here:

In order to avoid any confusion with the Copyright and License
Notices, please read these URLs:

If you are willing to make the changes mentioned above, please provide
us with an URL to an updated tarball of your project.  Upon review, we
will reconsider your project for inclusion in Savannah.


> A package was submitted to
> This mail was sent to address@hidden, address@hidden
> Mark Seaborn <address@hidden> described the package as follows:
> License: gpl
> Other License: Also LGPL for the parts that are linked into GNU libc.
> Package: Plash
> System name: plash
> Type: non-GNU
> Description:
> Plash is "the Principle of Least Authority Shell".
> Plash is a Unix shell which lets you run Unix programs with access only
> to the files and directories they need to run.  Programs are given
> access to files which were passed as command line arguments.
> In order to implement this the filesystem is virtualised.  Each
> process can have its own namespace -- its own root directory -- which
> can contain a subset of your files.
> This is implemented by modifying GNU libc and replacing the system
> calls that use filenames.  For example, open() is changed so that it
> sends a message to a file server via a socket.  If the request is
> successful, the server sends the client a file descriptor via the
> socket as a result.  Processes are run as the user `nobody', and in a
> chroot jail, so that they can't access any files using the usual
> system calls, and must go through the file server instead.  This
> approach doesn't require modifying the kernel at all.

"Emacs the only editor which has its own church"

Attachment: pgprMEC4lkbSK.pgp
Description: PGP signature

reply via email to

[Prev in Thread] Current Thread [Next in Thread]