[cap-talk] keys to capabilities?

[Sandro Magi]

Jed at Webstart wrote:

> How then can I interpret the above statement that a process "doesn't ...
> have the capabilities, it merely has keys to them."?
>
> Does it have the right to access the resource?  If so
> then it has the "capability."  If not, then not. 


It has the capabilities, it simply does not have access TO the 
capabilities. In cap-as-data systems, the process has the capability and 
also has access to the capability. In cap-as-descriptors, it does not 
have the latter.

In both systems, the process has the capabilities. At least, this is how 
I currently see it.

Sandro