Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 39929 invoked from network); 22 Dec 2007 09:40:55 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 22 Dec 2007 09:40:55 -0000 Received: (qmail 77917 invoked by uid 500); 22 Dec 2007 09:40:38 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 77859 invoked by uid 500); 22 Dec 2007 09:40:37 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 77840 invoked by uid 99); 22 Dec 2007 09:40:37 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 22 Dec 2007 01:40:37 -0800 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of michael@metaparadigm.com designates 203.117.131.43 as permitted sender) Received: from [203.117.131.43] (HELO metamail-vm.metaparadigm.com) (203.117.131.43) by apache.org (qpsmtpd/0.29) with ESMTP; Sat, 22 Dec 2007 09:40:26 +0000 Received: from [192.168.133.111] (cm15.gamma103.maxonline.com.sg [202.156.103.15]) (authenticated bits=0) by metamail-vm.metaparadigm.com (8.13.8/8.13.8/Debian-3) with ESMTP id lBM9e1uh022693 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sat, 22 Dec 2007 17:40:13 +0800 Message-ID: <476CDB71.4010500@metaparadigm.com> Date: Sat, 22 Dec 2007 17:40:01 +0800 From: Michael Clark Organization: Metaparadigm Pte Ltd User-Agent: Mozilla-Thunderbird 2.0.0.6 (X11/20071009) MIME-Version: 1.0 To: dev@httpd.apache.org Subject: Re: [RFC] Apache Privilege Separation for WebDAV (now against 2.2.6) References: <475E8FE6.3080802@metaparadigm.com> <4768EC1A.2020400@force-elite.com> In-Reply-To: <4768EC1A.2020400@force-elite.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: ClamAV 0.90.1/5216/Sat Dec 22 09:43:53 2007 on metamail-vm X-Virus-Status: Clean X-Virus-Checked: Checked by ClamAV on apache.org Paul Querna wrote: > How you stubbed out the file io seems fine for the lifetime of 2.2.x > and maybe 2.4.x, but in the long run, I believe we need to support > some kind of "VFS" layer, to make all IO pluggable. (open file, > directory listing, etc etc). Just thinking aloud on a few other benefits from a pluggable vfs layer. * A stackable performance statistics vfs module implementation that does timings on filesystem io calls. * A statcache stackable vfs modules that just stubs out the stat method and caches stat calls for a configurable amount of time (say 10 seconds). * An audit logging stackable vfs module that logs all io calls (mainly for debugging). In a addition to having a way to mount a vfs hook implementation for a given path, perhaps also an interface to replace a vfs hook with a delegating entry so that it can be stacked. Michael.