2008/046 Process Contract Decorations

[Nicolas Williams]

Is there a stable DTrace interface to get at a contract's decorations?

The problem with inheritting the FMRI from the contract's parent
contract is that login sessions' contracts (which are created primarily
to be distinct from that of the service that performed the login) and
sub-contracts will have an FMRI that is not necessarily useful -- the
FMRI decoration will only be useful in conjunction with a bit indicating
whether the FMRI was inheritted.

And if you wanted to you could make the privilege work sligthly
differently: rather than use the privilege to authorize the contract
identity set operation the kernel could simply set a one-bit decoration
value indicating whether the contract creator had that privilege.

Nico
--