[cap-talk] Re: "capabilities" as data vs. as descriptors - OS security discussion, restricted access processes, etc.

[Jonathan S. Shapiro]

On Tue, 2004-05-04 at 01:48, David Hopwood wrote:
> In Posix, Windows NT, and most other implementations of ACLs, each
> resource has an owner, and the owner is the only subject that can directly
> change the ACL (ignoring superusers/Administrators and other complications).

Nonsense! The owner is the *principal* that can directly change the ACL.

  Subject == Process
  Principal =~= User

shap