Information Flow Control for Standard OS Abstractions, SOSP 2007
Discussion lead: Nate Yazdani & Sowmya Janakiram Dharanipragada
What’s the difference between confined and unconfined processes?
How do processes read and write to files using Flume?
How does FlumeWiki (the Flumed MoinMoin) assign labels to ensure that only logged-in users can see protected pages? How does it ensure that untrusted plugins won’t mess up the page rendering? Would a Capcisum-like system be able enforce such properties?
Any questions or comments about the work or the paper.