CS 481: Solution for Assignment #6

Problem 17.9.

Problem 17.19. This problem has 3 questions in all, each with two instances (the system described and the Unix system). Before tackling the questions, let us look at the two systems. The Unix file organization to be used is depicted in Figure 17.14; the file system described in the exercise differs in two respects: for very small files, it can store data in the first block, whereas the first block in Unix never stores data; and, for larger files, the system described in the exercise uses linked blocks, whereas Unix uses a forest of increasingly deep trees. For a lark, I'll take the values given in the text as exact...

Problem 19.13. The text describes its answer to this question on the bottom of page 795. It does not comment on Unix: but it is pretty clear that Unix has no mechanism for protection domain: the closest it comes to this is groups: a user can be a member of different groups and, as such, has the capabilities associated with each group. The problem is that a user has all of the capabilities of *all of the groups* to which she belongs... There is no way in Unix for a user to move from one group to another under controlled circumstances. The only real way to mimic this is to create multiple users for a single one; the user can then logout from his current identity and login in a new identity with different access privileges. That is, of course, clumsy and also insufficient: we still need groups to allow the various identities of the same user to share access to certain resources/files and we have no way to prevent "leaks" between the various identities, because altering privileges is automatically possible for any user that has write privilege on the file.

Back to CS 481 home page