[OLPC Security] AUFS and interactions with the Journal

[Mike C. Fletcher]

Mike C. Fletcher wrote:
> I've been putting up some thoughts on using AUFS to automatically 
> populate the Journal for backup and sharing situations.  Up on the wiki now:
>
>     http://wiki.laptop.org/go/Journal_and_Overlays
>
> along with my post to the list that never seemed to get through:
>
>     http://wiki.laptop.org/go/Union_File_Systems
>   
I've just gone through cleaning up those documents and starting to unify 
them.  There are a number of places where the approach doesn't quite 
mesh with the plan in the Bitfrost specification, for instance the 
actual mechanism proposed for file storage is simple on-disk files with 
Journal entries simply referencing those files in order to allow easier 
legacy application integration.  I've been trying to keep the approach 
open enough that it could be implemented on any Linux-based operating 
system with the idea that it may bring in more developers if the project 
has external applicability.

AFAIK we have no work done yet on Bitfrost implementation?  Or is there 
work going on somewhere that's not apparent?  I'm thinking I'll try to 
find a few days to sit down and build an initial implementation of what 
I understand to be the security model.  At the moment that means 
something pretty close to what I'm describing in those documents wrt the 
file systems and chroot environments.

BTW, could someone add Category:Security to the Bitfrost and 
OLPC_Bitfrost pages.

Have fun,
Mike

-- 
________________________________________________
  Mike C. Fletcher
  Designer, VR Plumber, Coder
  http://www.vrplumber.com
  http://blog.vrplumber.com