Piru wrote:
What does multi-user support have to do with memory protection? Multi-user functionality is just supposed to be a method of making sure that user's have their own environment and don't get at each others files. MuFS does that.
Without memory protection any user can poke some magic location in the filesystem and make all files accessable.
That's a security issue, not a multi-user filesystem issue. The file-system does provide multi-user file access restrictions, even if it's not that hard to circumvent them. It's not secure enough for critical systems by any means, but it's good enough to prevent non-hackers from accessing/deleting the wrong files.
From the multiuser README:
Introduction
------------
MultiUser allows you to create a *IX-like environment where several users live
together in harmony, unable to delete each others files, unable to read those
private love-letters of other users. And this even if several users are
working on the machine at the same time (on a terminal hooked up to the serial
port)
People without a valid login ID and password won't be able to access files you
have made private with MultiUser. If you make all files private (not readable
for others), the only useful thing they could do, is boot from a floppy.
MuFS doesn't give any of the other true multiuser benefits, such as user specific preferences, or separated user home directories.
User specific preferences or separated home directories is not the job of a file-system, that's something that the desktop part of the OS should provide. Some people have been doing that with scripts.
So what is left? Supposedly separate file owner info and access permissions, which are trivially hacked.
Yep. That's about it.
muFS is even more pointless as muFS user/group info isn't synced with the user/group stuff in the TCP/IP stack. So you have two sets of users and groups to maintain, and you can easily get them out of sync.
I didn't know about this (never actually needed MuFS). That is definitely a problem. The Roadshow networking stack for OS4 doesn't have users/groups (at least, not in the preferences). I'd say that users/groups handling should be part of AmigaDOS, not the TCP/IP stack.
MuFS is pointless.
I'd say, ALMOST pointless. ;-)
Way back in 2000 some people were going to work on MuFS 2 which was supposed to address the security issues and AmiTCP integration. Sadly, there's been no news from them in 6 years. The current Amiga OS4 release has a certain amount of memory protection that could be used (e.g., you can allocate private memory), so that could be used (for OS4 only). It should really be built in to Amiga DOS though.
Hans