[libvirt] Re: [RFC] sVirt v0.10 - initial prototype
On Tuesday 28 October 2008 5:42:17 pm James Morris wrote:
On Thu, 23 Oct 2008, Paul Moore wrote:
> However, may I suggest that instead of representing the DOI as a
> string we use a 32bit integer? I know that may sound a bit odd,
> but in the networking world most DOI values are represented as
> integers and when security labels are involved they tend to be
> 32bits. I understand that using a plain integer is much more
> abstract than a human readable string but it should make it easier
> to leverage existing and future* DOI frameworks.
I'd prefer to use string, which can be managed freely by the user,
and be human-readable. Unlike IP layer networking, we're not
constrained by e.g. having to fit in the IP options, and can simply
convey the DOI as-is.
True, we've got plenty of space to play with in the sVirt case as
opposed to things like labeled networking and labeled NFS. However,
that wasn't really my concern. It is likely that at some point in the
future we will have some sort of standardized approach to dealing with
DOIs and right now most of the DOIs in the labeled security space are
32 bit integers; using a 32 bit value in sVirt has the potential to
make life much easier down the road. Granted, if strings are voted as
the way forward and portability of labeled guests really takes off then
I'm sure we'll find a way to deal with it; it would just be nice not to
have to adapt things later on.
This will also not prevent users from utilizing integers as the DOI
if desired.
Also true.
In the common non-DoD case, people should be able to configure the
DOI as simply as editing a configuration file to set the DOI to a
domain name or arbitrary realm name.
I don't think DoD/non-DoD has anything to do with it, it is more of a
management issue and both groups have the same problem. Is the
convenience of being able to enter "guests-r-us.com" over "5" in the
DOI field really worth the disconnect from the traditional 32 bit DOI
integer?
> *An informal group/list just formed to start discussing DOI
> management issues such as DOI formats, negotiation and translation.
URL ?
Viola, http://mail.opensolaris.org/mailman/listinfo/doi-discuss, there
was one thread in the beginning that got some traffic but it has been
pretty quiet since then. I'm pretty sure archives are available at the
link above.
--
paul moore
linux @ hp