From gww@eng.sun.com Wed Apr 2 15:41:24 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m32MfNqW022593 for ; Wed, 2 Apr 2008 15:41:24 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m32MfNU6009429 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 2 Apr 2008 15:41:23 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYP00905Z0XZI00@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 02 Apr 2008 15:41:21 -0700 (PDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYP002D3Z0WPMD0@nwk-avmta-2.sfbay.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 02 Apr 2008 15:41:20 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m32MfKHj052942 for ; Wed, 02 Apr 2008 15:41:20 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m32Nft7Q024430 for ; Wed, 02 Apr 2008 15:41:55 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m32NftYX024429 for psarc-ext@sun.com; Wed, 02 Apr 2008 15:41:55 -0800 (PST) Date: Wed, 02 Apr 2008 15:41:55 -0800 (PST) From: Gary Winiger Subject: Materials for Validated Execution (2008/195) To: psarc-ext@sun.com Message-id: <200804022341.m32NftYX024429@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 303 The following materials have been placed into the case inception.materials directory. -rw-r--r-- 1 johnz sac 183872 Apr 2 14:44 Design.1.1.pdf -rw-rw-r-- 1 johnz sac 27972 Apr 2 14:55 20questions.txt -rw-r--r-- 1 johnz sac 2407 Apr 2 15:24 signedexecd.1m Gary.. From gww@eng.sun.com Thu Apr 3 16:31:48 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m33NVl7S007827 for ; Thu, 3 Apr 2008 16:31:47 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m33NVh7R009806; Fri, 4 Apr 2008 07:31:46 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYR00K0FW0WHF00@nwk-avmta-2.sfbay.sun.com>; Thu, 03 Apr 2008 16:31:44 -0700 (PDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYR00EQTW0WOS80@nwk-avmta-2.sfbay.sun.com>; Thu, 03 Apr 2008 16:31:44 -0700 (PDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m33NVimG015610; Thu, 03 Apr 2008 16:31:44 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m340WKuf026076; Thu, 03 Apr 2008 16:32:20 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m340WKpU026075; Thu, 03 Apr 2008 16:32:20 -0800 (PST) Date: Thu, 03 Apr 2008 16:32:20 -0800 (PST) From: Gary Winiger Subject: 2008/226 mmapfd and 2008/195 validated execution To: psarc-ext@sun.com Cc: valex-core@sun.com Message-id: <200804040032.m340WKpU026075@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 439 When I extended the timer yesterday it was for two reasons. I should have mentioned them. First was the interface name that had not converged. The second was that there seemed to be some possible interactions between mmapfd and validated execution and I wanted to ask both project teams to take a quick look at the other project to see if some alignment might be needed? Please consider this a request to both projects. Thankx, Gary.. From Michael.Corcoran@sun.com Thu Apr 3 17:29:59 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m340TwfN008837 for ; Thu, 3 Apr 2008 17:29:59 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m340TtRL000726; Fri, 4 Apr 2008 08:29:57 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYR00K07YPV2200@brm-avmta-1.central.sun.com>; Thu, 03 Apr 2008 18:29:55 -0600 (MDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYR00LI2YPUNQE0@brm-avmta-1.central.sun.com>; Thu, 03 Apr 2008 18:29:54 -0600 (MDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m340Tspe029774; Fri, 04 Apr 2008 00:29:54 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JYR00301YGZAM00@mail-amer.sun.com> (original mail from Michael.Corcoran@Sun.COM); Thu, 03 Apr 2008 18:29:54 -0600 (MDT) Received: from musetta ([129.153.88.82]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JYR00J9SYPU8NC0@mail-amer.sun.com>; Thu, 03 Apr 2008 18:29:54 -0600 (MDT) Date: Thu, 03 Apr 2008 17:29:50 -0700 From: Michael Corcoran Subject: Re: 2008/226 mmapfd and 2008/195 validated execution In-reply-to: <200804040032.m340WKpU026075@marduk.eng.sun.com> Sender: Michael.Corcoran@sun.com To: Gary Winiger Cc: Michael.Corcoran@sun.com, PSARC-ext@sun.com, valex-core@sun.com Message-id: <1207268990.6990.67.camel@musetta> MIME-version: 1.0 X-Mailer: Evolution 2.6.2 Content-type: text/plain Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804040032.m340WKpU026075@marduk.eng.sun.com> x_sac_archived: PSARC/2008/226 Status: RO Content-Length: 1161 Thanks Gary. Reading through the 1.1 Design doc for validated execution, it's clear that there is a bit of interaction between these two projects. At the very least mmapfd(2) or more likely mmapobj(2) will need to be added to Section 2 along with the following block diagram. I don't see anything in mmapfd that would conflict with valex but valex would have to add some logic to mmapfd to call signedexec_validate(). Since other binaries, such as Java will not be mapped via mmapfd, the mmap modifications for PROT_EXEC still seem necessary. I was hoping that they could be eliminated, but that does not appear to be the case. --Mike On Thu, 2008-04-03 at 16:32 -0800, Gary Winiger wrote: > When I extended the timer yesterday it was for two reasons. I should have > mentioned them. First was the interface name that had not converged. > The second was that there seemed to be some possible interactions between > mmapfd and validated execution and I wanted to ask both project teams to > take a quick look at the other project to see if some alignment might > be needed? > > Please consider this a request to both projects. > > Thankx, > Gary.. > From johnz@domus.sfbay.sun.com Thu Apr 3 17:38:56 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m340ctQ0008883 for ; Thu, 3 Apr 2008 17:38:55 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m340clS9016966; Fri, 4 Apr 2008 01:38:54 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYR00001Z4S5200@nwk-avmta-2.sfbay.sun.com>; Thu, 03 Apr 2008 17:38:52 -0700 (PDT) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYR00ECPZ4SOUC0@nwk-avmta-2.sfbay.sun.com>; Thu, 03 Apr 2008 17:38:52 -0700 (PDT) Received: from domus.sfbay.sun.com (domus.SFBay.Sun.COM [10.6.64.11]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m340cq77032919; Thu, 03 Apr 2008 17:38:52 -0700 (PDT) Received: (from johnz@localhost) by domus.sfbay.sun.com (Trusted Solaris (8.11.7)/8.11.6) id m340cps12268; Thu, 03 Apr 2008 17:38:51 -0700 (PDT) Date: Thu, 03 Apr 2008 17:38:51 -0700 (PDT) From: John Zolnowsky x69422/408-404-5064 Subject: Re: 2008/226 mmapfd and 2008/195 validated execution To: psarc-ext@sun.com, gww@eng.sun.com Cc: valex-core@sun.com Message-id: <200804040038.m340cps12268@domus.sfbay.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 1417 > Date: Thu, 03 Apr 2008 16:32:20 -0800 (PST) > From: Gary Winiger ... > The second was that there seemed to be some possible interactions between > mmapfd and validated execution and I wanted to ask both project teams to > take a quick look at the other project to see if some alignment might > be needed? > > Please consider this a request to both projects. The execution-time validation of libraries being introduced into process images is expected to be triggered by rtld's idiomatic use of mmap(..., PROT_EXEC, ...). Since mmapfd() would subsume multiple mmap() calls into a single call producing essentially the same effects on the process image, it would appear that mmapfd() would provide the same opportunity for triggering the validation of the mapped object. The general nature of mmapfd() mapping represents a possible solution to a concern being discussed in 2008/195. The issue is that interpreters other than rtld often have the equivalent of libraries, for example, perl's .pm and .pl or the shell "source" or "." commands. These extended forms of library are presently introduced into the process "execution" using general interfaces (open(), read()), precluding any reliable triggering for validition of the object. As much as mmapfd() provides a generalized mechanism for accessing these forms of libraries, it would serve as a enabler for validated execution. -JZ From bart.smaalders@sun.com Thu Apr 3 20:45:56 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m343juCR012969 for ; Thu, 3 Apr 2008 20:45:56 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m343jsEo017752; Thu, 3 Apr 2008 20:45:56 -0700 (PDT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYS00C0J7SJR000@brm-avmta-1.central.sun.com>; Thu, 03 Apr 2008 21:45:55 -0600 (MDT) Received: from zion.sfbay.sun.com ([129.146.17.75]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYS002IA7SIVI60@brm-avmta-1.central.sun.com>; Thu, 03 Apr 2008 21:45:54 -0600 (MDT) Received: from [129.146.228.109] (cyber.SFBay.Sun.COM [129.146.228.109]) by zion.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m343jroF029767; Fri, 04 Apr 2008 03:45:53 +0000 (GMT) Date: Thu, 03 Apr 2008 20:45:53 -0700 From: Bart Smaalders Subject: Re: 2008/226 mmapfd and 2008/195 validated execution In-reply-to: <200804040038.m340cps12268@domus.sfbay.sun.com> To: John Zolnowsky x69422/408-404-5064 Cc: PSARC-ext@sun.com, gww@eng.sun.com, valex-core@sun.com Message-id: <47F5A471.10408@Sun.COM> Organization: Sun Microsystems MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200804040038.m340cps12268@domus.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080201) Status: RO Content-Length: 1031 John Zolnowsky x69422/408-404-5064 wrote: > The general nature of mmapfd() mapping represents a possible solution > to a concern being discussed in 2008/195. The issue is that > interpreters other than rtld often have the equivalent of libraries, > for example, perl's .pm and .pl or the shell "source" or "." commands. > These extended forms of library are presently introduced into the > process "execution" using general interfaces (open(), read()), > precluding any reliable triggering for validition of the object. As > much as mmapfd() provides a generalized mechanism for accessing these > forms of libraries, it would serve as a enabler for validated > execution. cat /etc/file | sh ??? It seems to be that validated execution is somewhat missing the point by focusing on "execution". I'll take my comments to 2008/195 when I get a chance.. - Bart -- Bart Smaalders Solaris Kernel Performance barts@cyber.eng.sun.com http://blogs.sun.com/barts "You will contribute more with mercurial than with thunderbird." From Nicolas.Williams@sun.com Fri Apr 4 08:49:41 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m34FneNF028503 for ; Fri, 4 Apr 2008 08:49:40 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m34FnbaV029836; Fri, 4 Apr 2008 16:49:37 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYT00C995AOR400@nwk-avmta-1.sfbay.Sun.COM>; Fri, 04 Apr 2008 08:49:36 -0700 (PDT) Received: from binky.Central.Sun.COM ([129.153.128.104]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYT00M4S5AM2K80@nwk-avmta-1.sfbay.Sun.COM>; Fri, 04 Apr 2008 08:49:34 -0700 (PDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m34FnXNE003785; Fri, 04 Apr 2008 10:49:33 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m34FnXs8003784; Fri, 04 Apr 2008 10:49:33 -0500 (CDT) Date: Fri, 04 Apr 2008 10:49:33 -0500 From: Nicolas Williams Subject: Re: 2008/226 mmapfd and 2008/195 validated execution In-reply-to: <1207268990.6990.67.camel@musetta> To: Michael Corcoran Cc: Gary Winiger , PSARC-ext@sun.com, valex-core@sun.com Reply-to: valex-discuss@opensolaris.org Mail-followup-to: Michael Corcoran , Gary Winiger , PSARC-ext@sun.com, valex-core@sun.com Message-id: <20080404154933.GR16998@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200804040032.m340WKpU026075@marduk.eng.sun.com> <1207268990.6990.67.camel@musetta> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i Status: RO Content-Length: 1375 On Thu, Apr 03, 2008 at 05:29:50PM -0700, Michael Corcoran wrote: > Thanks Gary. > > Reading through the 1.1 Design doc for validated execution, it's clear > that there is a bit of interaction between these two projects. At the > very least mmapfd(2) or more likely mmapobj(2) will need to be added to > Section 2 along with the following block diagram. > > I don't see anything in mmapfd that would conflict with valex but valex > would have to add some logic to mmapfd to call signedexec_validate(). > Since other binaries, such as Java will not be mapped via mmapfd, the > mmap modifications for PROT_EXEC still seem necessary. I was hoping > that they could be eliminated, but that does not appear to be the case. Slightly OT (reply-to set -- please honor it): Please see the discussion on the valex-discuss list this week. IMO mmap() and mmapobj() shouldn't be validating file signatures because either the caller should have done so already when it called open(). That the valex project proposes to do so for some calls to mmap() is indicative of a problem: finding all user-land code that should have config files, interpretable code, etc... verified, and modifying it to do so, does not scale. Darren Moffat and I propose a file attribute to deal with this that would, incidentally, make the need for mmap() and mmapobj() to validate files go away. Nico -- From Nicolas.Williams@sun.com Fri Apr 4 08:53:28 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m34FrSPw028758 for ; Fri, 4 Apr 2008 08:53:28 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m34FrLoe004873; Fri, 4 Apr 2008 08:53:27 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYT00D355H21Q00@nwk-avmta-1.sfbay.Sun.COM>; Fri, 04 Apr 2008 08:53:26 -0700 (PDT) Received: from binky.Central.Sun.COM ([129.153.128.104]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYT00MCA5GZ2C90@nwk-avmta-1.sfbay.Sun.COM>; Fri, 04 Apr 2008 08:53:24 -0700 (PDT) Received: from binky.Central.Sun.COM (localhost [127.0.0.1]) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1) with ESMTP id m34FrNF7003794; Fri, 04 Apr 2008 10:53:23 -0500 (CDT) Received: (from nw141292@localhost) by binky.Central.Sun.COM (8.14.1+Sun/8.14.1/Submit) id m34FrNoe003793; Fri, 04 Apr 2008 10:53:23 -0500 (CDT) Date: Fri, 04 Apr 2008 10:53:23 -0500 From: Nicolas Williams Subject: Re: 2008/226 mmapfd and 2008/195 validated execution In-reply-to: <47F5A471.10408@Sun.COM> To: Bart Smaalders Cc: John Zolnowsky x69422/408-404-5064 , PSARC-ext@sun.com, gww@eng.sun.com, valex-core@sun.com Mail-followup-to: Bart Smaalders , John Zolnowsky x69422/408-404-5064 , PSARC-ext@sun.com, gww@eng.sun.com, valex-core@sun.com Message-id: <20080404155323.GS16998@Sun.COM> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT Content-disposition: inline X-PMX-Version: 5.4.1.325704 References: <200804040038.m340cps12268@domus.sfbay.sun.com> <47F5A471.10408@Sun.COM> X-Authentication-warning: binky.Central.Sun.COM: nw141292 set sender to Nicolas.Williams@sun.com using -f User-Agent: Mutt/1.5.7i x_sac_archived: PSARC/2008/226 Status: RO Content-Length: 1341 On Thu, Apr 03, 2008 at 08:45:53PM -0700, Bart Smaalders wrote: > John Zolnowsky x69422/408-404-5064 wrote: > > >The general nature of mmapfd() mapping represents a possible solution > >to a concern being discussed in 2008/195. The issue is that > >interpreters other than rtld often have the equivalent of libraries, > >for example, perl's .pm and .pl or the shell "source" or "." commands. > >These extended forms of library are presently introduced into the > >process "execution" using general interfaces (open(), read()), > >precluding any reliable triggering for validition of the object. As > >much as mmapfd() provides a generalized mechanism for accessing these > >forms of libraries, it would serve as a enabler for validated > >execution. > > cat /etc/file | sh ??? > > It seems to be that validated execution is somewhat missing the point > by focusing on "execution". Darren M. noticed this a while back and commented on this on the valex-discuss list, with no resolution. This week there's a more active discussion of the issue on that list. > I'll take my comments to 2008/195 when I get a chance.. Perhaps it's time to take the valex-discuss thread onto the 2008/195 case. With 2008/195 a full case I thought it'd be better to discuss the matter in the project list and then bring issues to the meeting. Nico -- From owner-sac-advocates Fri Apr 4 09:16:35 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m34GGYRw000145 for ; Fri, 4 Apr 2008 09:16:35 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m34GFgKn009439; Fri, 4 Apr 2008 17:15:47 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYT0000D6IA1K00@brm-avmta-1.central.sun.com> (ORCPT psarc-agenda-announce@Sun.COM); Fri, 04 Apr 2008 10:15:46 -0600 (MDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYT00DEA6I94M80@brm-avmta-1.central.sun.com> (ORCPT psarc-agenda-announce@Sun.COM); Fri, 04 Apr 2008 10:15:45 -0600 (MDT) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m34GFiST062442; Fri, 04 Apr 2008 09:15:44 -0700 (PDT) Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m34GF1t7000110 for ; Fri, 04 Apr 2008 09:15:02 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m34GEvZ9008994 for <@sunmail2sca.sfbay.sun.com:psarc-agenda-announce@sun.com>; Fri, 04 Apr 2008 17:15:01 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYT00F0P6GZ3F00@nwk-avmta-1.sfbay.Sun.COM> for psarc-agenda-announce@sun.com (ORCPT psarc-agenda-announce@Sun.COM); Fri, 04 Apr 2008 09:14:59 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYT00M3X6GU2MB0@nwk-avmta-1.sfbay.Sun.COM> for psarc-agenda-announce@sun.com (ORCPT psarc-agenda-announce@Sun.COM); Fri, 04 Apr 2008 09:14:54 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m34GEs70023471 for ; Fri, 04 Apr 2008 16:14:54 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JYT00K01675AZ00@mail-amer.sun.com> (original mail from Aarti.Pai@Sun.COM) for psarc-agenda-announce@Sun.COM (ORCPT psarc-agenda-announce@Sun.COM); Fri, 04 Apr 2008 10:14:54 -0600 (MDT) Received: from [129.145.154.101] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JYT0016Z6GS5SB0@mail-amer.sun.com>; Fri, 04 Apr 2008 10:14:53 -0600 (MDT) Date: Fri, 04 Apr 2008 09:14:52 -0700 From: Aarti Pai Subject: PSARC Agenda - April 9, 2008 - [2008/195] Validated Execution Sender: Aarti.Pai@sun.com To: psarc-agenda-announce@sun.com Cc: John Zolnowsky , valex-discuss@opensolaris.org Reply-to: Aarti.Pai@sun.com Message-id: <47F653FC.6000304@Sun.COM> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_JVku0XcNOdyTL0Z8R7qg3w)" X-PMX-Version: 5.4.1.325704 X-PMX-Version: 5.4.1.325704 User-Agent: Thunderbird 2.0.0.6 (X11/20070802) Status: RO This is a multi-part message in MIME format. --Boundary_(ID_JVku0XcNOdyTL0Z8R7qg3w) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ NOTE: We WILL NOT be bridging the internal and external numbers - you *must* call in on the proper number, and you *will* need to hang up and dial in on the other number when we switch between the open and closed sections. Please see agenda below for details. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ ============================================================================ PSARC - Platform Software Architecture Review Committee PSARC meets weekly on Wednesday: 10am-1pm (Pacific) except on the 3rd Wednesday each month 4pm-7pm (Pacific) on the 3rd Wednesday each month Where: MPK 17 Presidio Conference room, 3rd floor, room 3507 Video: Realtime: http://mpk17-presidio-camera.sfbay.sun.com Low Bandwidth: http://sac.sfbay.sun.com/Reports/PresidioCamera/room.jpg (refresh every 5 minutes) Anyone from Engineering may attend PSARC meetings (unless otherwise noted in the agenda); in addition, most meetings have segments that are open to various open source communities outside of Sun. PSARC meetings are recorded. ============================================================================ TELECONFERENCE NUMBERS: OPEN PSARC MEETINGS: Open Dial in - (866)545-5223 (Within US) - (865)673-9887 (International Access) - x44409 (direct dial inside Sun) Participant Code: 939 5 586# =========================================================================== ARCHITECTURE REVIEW SCHEDULE: 04/09/2008 (Presidio not available, use China Town CR MPK17:3627) Glenn likely out, Tim out 10:00-10:10 Closed ARC Business (use closed dial in above) 10:15-10:25 Open ARC Business (use open dial in above) 10:25-11:10 Open Inception: Validated Execution (2008/195 ) Submitter: John Zolnowsky Owner: Gary Winiger Intern: Darren Reed Exposure: open --Boundary_(ID_JVku0XcNOdyTL0Z8R7qg3w) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT   
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
NOTE: We WILL NOT be bridging the internal and external numbers
- you *must* call in on the proper number, and you *will* need to hang
up and dial in on the other number when we switch between the open and
closed sections. Please see agenda below for details.
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
============================================================================

	PSARC - Platform Software Architecture Review Committee

        PSARC meets weekly on Wednesday:
		10am-1pm (Pacific) except on the 3rd Wednesday each month
		 4pm-7pm (Pacific) on the 3rd Wednesday each month

        Where: MPK 17 Presidio Conference room, 3rd floor, room 3507
        Video: Realtime:      http://mpk17-presidio-camera.sfbay.sun.com
               Low Bandwidth: http://sac.sfbay.sun.com/Reports/PresidioCamera/room.jpg
                              (refresh every 5 minutes)

	Anyone from Engineering may attend PSARC meetings (unless otherwise
	noted in the agenda); in addition, most meetings have segments that
	are open to various open source communities outside of Sun.
	PSARC meetings are recorded.

============================================================================
        TELECONFERENCE NUMBERS:

	    OPEN PSARC MEETINGS:

	    Open Dial in - (866)545-5223 (Within US)
		         - (865)673-9887 (International Access)
			 - x44409 (direct dial inside Sun)
	    Participant Code: 939 5 586#

===========================================================================
ARCHITECTURE REVIEW SCHEDULE:

04/09/2008      (Presidio not available, use China Town CR MPK17:3627)
		Glenn likely out, Tim out
    10:00-10:10 Closed ARC Business  (use closed dial in above)
    10:15-10:25 Open ARC Business (use open dial in above)
    10:25-11:10 Open Inception: Validated Execution (2008/195)
		Submitter: John Zolnowsky
		Owner: Gary Winiger
		Intern:	Darren Reed
		Exposure: open
 --Boundary_(ID_JVku0XcNOdyTL0Z8R7qg3w)-- From gww@sac.sfbay.sun.com Fri Apr 4 13:22:44 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m34KMhN1008013 for ; Fri, 4 Apr 2008 13:22:44 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m34KMePf014042; Fri, 4 Apr 2008 21:22:42 +0100 (BST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYT00I09HXSF000@brm-avmta-1.central.sun.com>; Fri, 04 Apr 2008 14:22:40 -0600 (MDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYT00AXLHXRVV40@brm-avmta-1.central.sun.com>; Fri, 04 Apr 2008 14:22:40 -0600 (MDT) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m34KMcck032234; Fri, 04 Apr 2008 13:22:38 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m34KMcDC008010; Fri, 04 Apr 2008 13:22:38 -0700 (PDT) Received: (from gww@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m34KMcGk008009; Fri, 04 Apr 2008 13:22:38 -0700 (PDT) Date: Fri, 04 Apr 2008 13:22:38 -0700 (PDT) From: Gary Winiger Subject: Re: 2008/226 mmapfd and 2008/195 validated execution To: Nicolas.Williams@sun.com, bart.smaalders@sun.com Cc: John.Zolnowsky@sun.com, PSARC-ext@sun.com, gww@eng.sun.com, valex-core@sun.com Message-id: <200804042022.m34KMcGk008009@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 x_sac_archived: PSARC/2008/226 Status: RO Content-Length: 1633 > On Thu, Apr 03, 2008 at 08:45:53PM -0700, Bart Smaalders wrote: > > John Zolnowsky x69422/408-404-5064 wrote: > > > > >The general nature of mmapfd() mapping represents a possible solution > > >to a concern being discussed in 2008/195. The issue is that > > >interpreters other than rtld often have the equivalent of libraries, > > >for example, perl's .pm and .pl or the shell "source" or "." commands. > > >These extended forms of library are presently introduced into the > > >process "execution" using general interfaces (open(), read()), > > >precluding any reliable triggering for validition of the object. As > > >much as mmapfd() provides a generalized mechanism for accessing these > > >forms of libraries, it would serve as a enabler for validated > > >execution. The point of my asking for more time on the mmapfd case was to ensure both teams say the other case. IMO, that has been satisfied and both projects can proceed. > > cat /etc/file | sh ??? > > > > It seems to be that validated execution is somewhat missing the point > > by focusing on "execution". > > Darren M. noticed this a while back and commented on this on the > valex-discuss list, with no resolution. This week there's a more active > discussion of the issue on that list. For this further point, IMO this is gw-0 Case boundaries relative to things like "cat foo | sh" and is proper to discuss as part of the full review. If you have architectural points, please bring them to the review. Gary.. P.S. I'm happy to proxy issue to the issues file for those who may not have modify access rights if they are mailed privately to me. From roland.mainz@nrubsig.org Sat Apr 5 19:27:47 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m362RlJw028892 for ; Sat, 5 Apr 2008 19:27:47 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m362RkON000708; Sat, 5 Apr 2008 19:27:46 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYV00L05TIA2Z00@nwk-avmta-2.sfbay.sun.com>; Sat, 05 Apr 2008 19:27:46 -0700 (PDT) Received: from sca-ea-mail-2.sun.com ([192.18.43.25]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYV00M05TI9RCF0@nwk-avmta-2.sfbay.sun.com>; Sat, 05 Apr 2008 19:27:45 -0700 (PDT) Received: from relay18i.sun.com (ip128.net129179-4.block1.us.syntegra.com [129.179.4.128]) by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m362RjSL014399; Sun, 06 Apr 2008 02:27:45 +0000 (GMT) Received: from mmp14es.sun.com ([160.41.209.24] [160.41.209.24]) by relay18i.sun.com with ESMTP id BT-MMP-466915; Sun, 06 Apr 2008 02:27:44 +0000 (Z) Received: from relay18i.sun.com (relay18i.sun.com [129.179.4.128]) by mmp14es.sun.com with ESMTP id BT-MMP-176443; Sun, 06 Apr 2008 02:27:44 +0000 (Z) Received: from mail-in-03.arcor-online.net ([151.189.21.43] [151.189.21.43]) by relay1i.sun.com with ESMTP id BT-MMP-4692171; Sun, 06 Apr 2008 02:27:44 +0000 (Z) Received: from mail-in-10-z2.arcor-online.net (mail-in-10-z2.arcor-online.net [151.189.8.27]) by mail-in-03.arcor-online.net (Postfix) with ESMTP id B9B112CB2A9; Sun, 06 Apr 2008 04:27:43 +0200 (CEST) Received: from mail-in-07.arcor-online.net (mail-in-07.arcor-online.net [151.189.21.47]) by mail-in-10-z2.arcor-online.net (Postfix) with ESMTP id A687F23D40B; Sun, 06 Apr 2008 04:27:43 +0200 (CEST) Received: from jupiterb48.nrubsig.org (dslb-084-059-001-044.pools.arcor-ip.net [84.59.1.44]) by mail-in-07.arcor-online.net (Postfix) with ESMTP id 860CF292B61; Sun, 06 Apr 2008 04:27:43 +0200 (CEST) Received: from nrubsig.org (localhost [127.0.0.1]) by jupiterb48.nrubsig.org (8.13.8+Sun/8.13.8) with ESMTP id m362RfPO001248; Sun, 06 Apr 2008 04:27:42 +0200 (CEST) Date: Sun, 06 Apr 2008 04:27:41 +0200 From: Roland Mainz Subject: Re: 2008/226 mmapfd and 2008/195 validated execution Sender: gisburn@jupiterb48.nrubsig.org To: Bart Smaalders Cc: John Zolnowsky x69422/408-404-5064 , PSARC-ext@sun.com, valex-core@sun.com, gww@eng.sun.com Message-id: <47F8351D.7F125B14@nrubsig.org> MIME-version: 1.0 X-Mailer: Mozilla 4.76 [en] (X11; U; SunOS 5.11 sun4u) Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-Accept-Language: en X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Virus-Scanned: ClamAV 0.92.1/6628/Sun Apr 6 03:14:00 2008 on mail-in-07.arcor-online.net X-Virus-Status: Clean X-Antispam: No, score=-2.6/5.0, scanned in 0.060sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200804040038.m340cps12268@domus.sfbay.sun.com> <47F5A471.10408@Sun.COM> Status: RO Content-Length: 1273 Bart Smaalders wrote: > John Zolnowsky x69422/408-404-5064 wrote: > > The general nature of mmapfd() mapping represents a possible solution > > to a concern being discussed in 2008/195. The issue is that > > interpreters other than rtld often have the equivalent of libraries, > > for example, perl's .pm and .pl or the shell "source" or "." commands. > > These extended forms of library are presently introduced into the > > process "execution" using general interfaces (open(), read()), > > precluding any reliable triggering for validition of the object. As > > much as mmapfd() provides a generalized mechanism for accessing these > > forms of libraries, it would serve as a enabler for validated > > execution. > > cat /etc/file | sh ??? Or worse: "eval" ... ... another issue is that shells like "ksh" support function libraries (via FPATH) which are loaded on demand... how should this be handled ? > It seems to be that validated execution is somewhat missing the point > by focusing on "execution". > > I'll take my comments to 2008/195 when I get a chance.. /me, too... ---- Bye, Roland -- __ . . __ (o.\ \/ /.o) roland.mainz@nrubsig.org \__\/\/__/ MPEG specialist, C&&JAVA&&Sun&&Unix programmer /O /==\ O\ TEL +49 641 7950090 (;O/ \/ \O;) From owner-sac-advocates Mon Apr 7 15:10:41 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m37MAeuO003190 for ; Mon, 7 Apr 2008 15:10:40 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m37M9S8M004988; Tue, 8 Apr 2008 06:09:32 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYZ0080D6VUJ800@brm-avmta-1.central.sun.com> (ORCPT psarc-agenda-announce@Sun.COM); Mon, 07 Apr 2008 16:09:30 -0600 (MDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYZ00I536VTBZC0@brm-avmta-1.central.sun.com> (ORCPT psarc-agenda-announce@Sun.COM); Mon, 07 Apr 2008 16:09:29 -0600 (MDT) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m37M9TPX019206; Mon, 07 Apr 2008 15:09:29 -0700 (PDT) Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m37M8i4F002825 for ; Mon, 07 Apr 2008 15:08:44 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m37M8di8004630 for <@sunmail2sca.sfbay.sun.com:psarc-agenda-announce@sun.com>; Tue, 08 Apr 2008 06:08:43 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYZ0050L6UGCM00@nwk-avmta-2.sfbay.sun.com> for psarc-agenda-announce@sun.com (ORCPT psarc-agenda-announce@Sun.COM); Mon, 07 Apr 2008 15:08:40 -0700 (PDT) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYZ00MQC6UFEXD0@nwk-avmta-2.sfbay.sun.com> for psarc-agenda-announce@sun.com (ORCPT psarc-agenda-announce@Sun.COM); Mon, 07 Apr 2008 15:08:40 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m37M8dTI017448 for ; Mon, 07 Apr 2008 22:08:39 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JYZ00K015JFEK00@mail-amer.sun.com> (original mail from Aarti.Pai@Sun.COM) for psarc-agenda-announce@Sun.COM (ORCPT psarc-agenda-announce@Sun.COM); Mon, 07 Apr 2008 16:08:39 -0600 (MDT) Received: from [129.145.154.79] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JYZ002WY6U9AED0@mail-amer.sun.com>; Mon, 07 Apr 2008 16:08:34 -0600 (MDT) Date: Mon, 07 Apr 2008 15:08:33 -0700 From: Aarti Pai Subject: REVISED: PSARC Agenda - April 9, 2008 - [2008/195] Validated Execution Sender: Aarti.Pai@sun.com To: psarc-agenda-announce@sun.com Cc: John Zolnowsky , valex-discss@opensolaris.org Reply-to: Aarti.Pai@sun.com Message-id: <47FA9B61.6020908@Sun.COM> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_pXde0J/xJGoWHE9W8phxAg)" X-PMX-Version: 5.4.1.325704 X-PMX-Version: 5.4.1.325704 User-Agent: Thunderbird 2.0.0.6 (X11/20070802) Status: RO This is a multi-part message in MIME format. --Boundary_(ID_pXde0J/xJGoWHE9W8phxAg) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Please note, we have added a closed agenda item. See below for the revised agenda / times. Also note, if you plan to attend in person, we will meet in _China Town, MPK17 3627._ (Presidio was booked for a one time event, well in advance.) $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ NOTE: We WILL NOT be bridging the internal and external numbers - you *must* call in on the proper number, and you *will* need to hang up and dial in on the other number when we switch between the open and closed sections. Please see agenda below for details. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ ============================================================================ PSARC - Platform Software Architecture Review Committee PSARC meets weekly on Wednesday: 10am-1pm (Pacific) except on the 3rd Wednesday each month 4pm-7pm (Pacific) on the 3rd Wednesday each month Where: MPK 17 Presidio Conference room, 3rd floor, room 3507 Video: Realtime: http://mpk17-presidio-camera.sfbay.sun.com Low Bandwidth: http://sac.sfbay.sun.com/Reports/PresidioCamera/room.jpg (refresh every 5 minutes) Anyone from Engineering may attend PSARC meetings (unless otherwise noted in the agenda); in addition, most meetings have segments that are open to various open source communities outside of Sun. PSARC meetings are recorded. ============================================================================ TELECONFERENCE NUMBERS: OPEN PSARC MEETINGS: Open Dial in - (866)545-5223 (Within US) - (865)673-9887 (International Access) - x44409 (direct dial inside Sun) Participant Code: 939 5 586# =========================================================================== ARCHITECTURE REVIEW SCHEDULE: 04/09/2008 (Presidio not available, use China Town CR MPK17:3627) Glenn likely out, Tim out 10:00-10:10 Open ARC Business (use open dial in above) 10:10-10:55 Open Inception: Validated Execution (2008/195 ) Submitter: John Zolnowsky Owner: Gary Winiger Intern: Darren Reed Exposure: open 11:00-11:45 Closed ARC Business (use closed dial-in) Closed Discussion: Certificate & PKCS#11 PAM module (2006/283 ) Submitter: Huie-Ying Lee Owner: Darren Moffat --Boundary_(ID_pXde0J/xJGoWHE9W8phxAg) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Please note, we have added a  closed agenda item.  See below for the revised agenda / times.
Also note, if you plan to attend in person, we will meet in China Town, MPK17 3627.
(Presidio was booked for a one time event, well in advance.)


  
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
NOTE: We WILL NOT be bridging the internal and external numbers
- you *must* call in on the proper number, and you *will* need to hang
up and dial in on the other number when we switch between the open and
closed sections. Please see agenda below for details.
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
============================================================================

	PSARC - Platform Software Architecture Review Committee

        PSARC meets weekly on Wednesday:
		10am-1pm (Pacific) except on the 3rd Wednesday each month
		 4pm-7pm (Pacific) on the 3rd Wednesday each month

        Where: MPK 17 Presidio Conference room, 3rd floor, room 3507
        Video: Realtime:      http://mpk17-presidio-camera.sfbay.sun.com
               Low Bandwidth: http://sac.sfbay.sun.com/Reports/PresidioCamera/room.jpg
                              (refresh every 5 minutes)

	Anyone from Engineering may attend PSARC meetings (unless otherwise
	noted in the agenda); in addition, most meetings have segments that
	are open to various open source communities outside of Sun.
	PSARC meetings are recorded.

============================================================================
        TELECONFERENCE NUMBERS:

	    OPEN PSARC MEETINGS:

	    Open Dial in - (866)545-5223 (Within US)
		         - (865)673-9887 (International Access)
			 - x44409 (direct dial inside Sun)
	    Participant Code: 939 5 586#

===========================================================================
ARCHITECTURE REVIEW SCHEDULE:

04/09/2008      (Presidio not available, use China Town CR MPK17:3627)
		Glenn likely out, Tim out
    10:00-10:10 Open ARC Business (use open dial in above)
    10:10-10:55 Open Inception: Validated Execution (2008/195)
		Submitter: John Zolnowsky
		Owner: Gary Winiger
		Intern:	Darren Reed
		Exposure: open
    11:00-11:45 Closed ARC Business (use closed dial-in)
		Closed Discussion: Certificate & PKCS#11 PAM module (2006/283) 
		Submitter: Huie-Ying Lee
                Owner: Darren Moffat

--Boundary_(ID_pXde0J/xJGoWHE9W8phxAg)-- From sacadmin Wed Apr 9 14:12:13 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m39LCC9C004058 for ; Wed, 9 Apr 2008 14:12:12 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m39LBk20001104 for <@sunmail2sca.sfbay.sun.com:psarc@sun.com>; Wed, 9 Apr 2008 22:12:11 +0100 (BST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JZ20011DTK9TM00@nwk-avmta-2.sfbay.sun.com> for psarc@sun.com (ORCPT psarc@Sun.COM); Wed, 09 Apr 2008 14:12:09 -0700 (PDT) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JZ200I7WTK9E280@nwk-avmta-2.sfbay.sun.com> for psarc@sun.com (ORCPT psarc@Sun.COM); Wed, 09 Apr 2008 14:12:09 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m39LC8OA011915 for ; Wed, 09 Apr 2008 21:12:08 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JZ200601TG4EP00@mail-amer.sun.com> (original mail from Aarti.Pai@Sun.COM) for psarc@Sun.COM (ORCPT psarc@Sun.COM); Wed, 09 Apr 2008 15:12:08 -0600 (MDT) Received: from [129.145.154.79] by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JZ200FGBTK0WW70@mail-amer.sun.com>; Wed, 09 Apr 2008 15:12:01 -0600 (MDT) Date: Wed, 09 Apr 2008 14:12:00 -0700 From: Aarti Pai Subject: Meeting Minutes for PSARC - 04/09/2008 [2008/195] Sender: Aarti.Pai@sun.com To: psarc@sun.com Cc: John Zolnowsky , Scott Rotondo , Kevin Janssen , Huie-Ying Lee , Gordon Ross Reply-to: Aarti.Pai@sun.com Message-id: <47FD3120.6000004@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 User-Agent: Thunderbird 2.0.0.6 (X11/20070802) Status: RO Minutes/Audio for PSARC - 04/09/2008 are now available: - Open Arc Business: Minutes: http://sac.sfbay/Archives/Minutes/PSARC/2008/20080409.arcbiz.open Audio: http://sac.sfbay/Archives/Minutes/PSARC/2008/20080409.arcbiz.open.mp3 - Open Inception Case: Validated Execution (2008/195) Minutes: http://sac.sfbay/Archives/Minutes/PSARC/2008/20080409.2008.195.inception Audio: http://sac.sfbay/Archives/Minutes/PSARC/2008/20080409.2008.195.inception.mp3 - Closed ARC Business: Minutes:http://sac.sfbay/Archives/Minutes/PSARC/2008/20080409.arcbiz.closed Audio: http://sac.sfbay/Archives/Minutes/PSARC/2008/20080409.arcbiz.closed.mp3 Please contact me directly if you require any corrections/modifications to these minutes. Aarti From gww@sac.sfbay.sun.com Wed Dec 16 12:15:36 2009 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBGKFaKA001159 for ; Wed, 16 Dec 2009 12:15:36 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBGKFZsq026845 for <@sunmail2sca.sfbay.sun.com:psarc-ext@sun.com>; Wed, 16 Dec 2009 12:15:36 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KUR00K1LHLZ2600@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 16 Dec 2009 13:15:35 -0700 (MST) Received: from dm-sfbay-01.sfbay.sun.com ([129.145.155.118]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KUR007UOHKRTG80@brm-avmta-1.central.sun.com> for psarc-ext@sun.com (ORCPT psarc-ext@sun.com); Wed, 16 Dec 2009 13:14:51 -0700 (MST) Received: from sac.sfbay.sun.com (sac.SFBay.Sun.COM [129.146.226.132]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.4) with ESMTP id nBGKEoVN025723; Wed, 16 Dec 2009 12:14:50 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id nBGKEoGe001130; Wed, 16 Dec 2009 12:14:50 -0800 (PST) Received: (from gww@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id nBGKEo13001129; Wed, 16 Dec 2009 12:14:50 -0800 (PST) Date: Wed, 16 Dec 2009 12:14:50 -0800 (PST) From: Gary Winiger Subject: PSARC/2008/195 Validated Execution To: psarc-ext@sun.com Cc: valex-discuss@opensolaris.org Message-id: <200912162014.nBGKEo13001129@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 128 At the request of the project team, this case has been superseded by PSARC/2009/676 Validated Execution Umbrella Case. Gary..