[cap-talk] keys to capabilities?
smagi at naasking.homeip.net
Thu Nov 4 10:28:03 EST 2004
Jed at Webstart wrote:
> How then can I interpret the above statement that a process "doesn't ...
> have the capabilities, it merely has keys to them."?
> Does it have the right to access the resource? If so
> then it has the "capability." If not, then not.
It has the capabilities, it simply does not have access TO the
capabilities. In cap-as-data systems, the process has the capability and
also has access to the capability. In cap-as-descriptors, it does not
have the latter.
In both systems, the process has the capabilities. At least, this is how
I currently see it.
More information about the cap-talk