[cap-talk] Facet term

[Norman Hardy]

On Jun 27, 2006, at 12:07 PM, Jed at Webstart wrote:
>

........

> Can the node and domain keys still be effectively "emulated"
> (substituted) by an extension (e.g. remote) key?  If the kernel
> knows node and domain keys when it sees them, that would
> seem to suggest that it would know when it received an
> extension (e.g. emulating a node or domain key) key
> instead.  In my limited experience (e.g. with RATS) that's
> an area where care needs to be taken to insure that all
> the base system capabilities can be emulated/extended
> (as the file capability was not on RATS).
>
> Just thought I'd ask.  Perhaps Charlie knows?

This is a non-trivial question with less trivial answer.
See <http://cap-lore.com/CapTheory/KK/Synthetic.html> for a lengthy  
reply.
Mostly you can fake kernel objects, but with many caveats.