[cap-talk] Process vs. Object

Jonathan S. Shapiro shap at eros-os.org
Thu Mar 24 22:47:16 EST 2005


On Thu, 2005-03-24 at 14:14 -0800, Charles Landau wrote:
> >>First, a note on terminology: "Process" is simply the wrong term, 
> >>as the properties we're concerned about here have nothing to do 
> >>with scheduling concerns. The access control literature refers to 
> >>the entity an access right gives access to as an "object". It 
> >>refers to the entity that may possess and exercise such a right as 
> >>a "subject".

Actually, most of the access control literature then goes on to identify
subjects as a subset of objects. Alternatively (usually in access matrix
discussions), they construct a table with subjects on one side and
subjects+objects on the other, which is effectively stating that
subjects are a subset of objects.


shap



More information about the cap-talk mailing list