News for hackers. Stuff that matters.
Re:Plan9-9k: 64-bit Plan 9 by naasking on Friday June 09, 2017 @03:17PM (#14523688)
> - Namespace isolation for processes.

This is seriously underappreciated IMO. You can entirely replace access control with private namespaces without any real loss in generality. In fact, they're more flexible and secure.

Re:Plan9-9k: 64-bit Plan 9 by cyphar on Saturday June 10, 2017 @02:40PM (#14528569)
And actually that's exactly what the FreeBSD Jails paper says too. Their aim was to make uid 0 more granular by segmenting the system so that you have different access control in those jails.

You see some of these ideas in Linux, but as with all Linux kernel technologies they all feel like they've not been written with a design in mind from the start (just look at epoll, namespaces, /proc, and so on).

Re:Plan9-9k: 64-bit Plan 9 by naasking on Saturday June 10, 2017 @06:56PM (#14529676)
All UNIX flavours are pretty late to the party though, even plan 9. This sort of isolation was a feature of most capability operating systems since the 60s.