[cap-talk] Another "core" principle - virtualize capabilities

[Jonathan S. Shapiro]

On Thu, 2007-01-04 at 06:20 -0800, Mark S. Miller wrote:
> Marcus Brinkmann wrote:
> > [...]   I optimistically believe
> > that functional membrances can be implement in the kernel efficiently
> > as a fundamental mechanism.  Furthermore, Neal has a proposal for
> > fine-grained resource delegation without interposition, so that
> > resource management can be done without many domain changes per
> > request as well.
> 
> This sounds like a big deal. Has this proposal been explained? Did I miss it?

I don't believe it at all. Membranes must implement an MxN structure.
Such a structure cannot be implemented in O(M+N) memory. Therefore
membranes must allocate. Therefore they cannot be implemented in-kernel
in a robust design.
-- 
Jonathan S. Shapiro, Ph.D.
Managing Director
The EROS Group, LLC
+1 443 927 1719 x5100