[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: architecture and security



On Thu, Apr 13, 2006 at 12:16:14PM -0700, Andy Bierman wrote:
 
> References in identifiers -- you mean like information
> carried in the instance portion of an OID?
> 
> Not sure what you mean

Operators seem to like to name things in meaningful ways and these
names frequently carry information which may be sensitive. If you want
to define views so that different people can look at a box, you have
to ensure that nothing leaks through which might be embedded in
operator assigned names (and thus can't be really handled by access
control rules unless you have embedded AI).

/js

-- 
Juergen Schoenwaelder		    International University Bremen
<http://www.eecs.iu-bremen.de/>	    P.O. Box 750 561, 28725 Bremen, Germany

--
to unsubscribe send a message to netconf-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://ops.ietf.org/lists/netconf/>