[cap-talk] capability copy and capability map

Neal H. Walfield neal at walfield.org
Tue Oct 24 15:17:54 CDT 2006


At Tue, 24 Oct 2006 12:58:19 -0700,
Charles Landau wrote:
> 
> At 7:46 PM +0200 10/24/06, Neal H. Walfield wrote:
> >The L4 community does not have capability copy: capabilities are
> >always revocable by the process which did the delegation.  Thus, if A
> >has a capability designating S and wants to pass it to B, the
> >resulting access graph would look like this when using capability
> >copy:
> >
> >      .-- A
> >    S<
> >      `-- B
> >
> >whereas it looks like this when using map:
> >
> >    S -> A -> B
> 
> In L4, what happens if A ceases to exist and B continues to exist?

All capabilities which A mapped are implicitly unmapped.


More information about the cap-talk mailing list