LibC status and others...
Matthew Dillon
dillon at apollo.backplane.com
Fri Dec 12 15:47:49 PST 2003
:ibotty wrote:
:> as i reworked getpwent.c quite a bit, i found, that writing this
:> out-of-process, with a persistent buffer, is way easier.
:>
:> besides being easier, access control is very much easier.
:> even /etc/passwd could be 0400 (or 0440, owned by root with group of the
:> daemon).
:
:Hooray for Unix philosophy.
:
:Is the daemon going to be listening on a Unix domain socket?
No. The idea is to use an IPC mechanism for that. The problem with
UNIX domain sockets is that it takes a lot of system calls to properly
multi-thread requests coming in from multiple processes. With a
dedicated IPC mechanism it becomes a lot easier because the kernel can
aggregate all the requests and deal with security and other issues all
at once.
-Matt
Matthew Dillon
<dillon at xxxxxxxxxxxxx>
More information about the Kernel
mailing list