[tahoe-dev] The big tahoe problem

James A. Donald jamesd at echeque.com
Thu Feb 11 05:12:37 PST 2010


The data loss bug, that a directory can be moved into itself or a 
subdirectory of itself, is a particular case of a more general problem:  
That a tool for creating and manipulating capabilities is of limited 
value unless it is part of a system for managing capabilities.  It 
should not be possible to create a capability, except you create it in a 
place you can subsequently access from a root capability, should not be 
possible to create a capability except you create it somewhere.


More information about the tahoe-dev mailing list