[cap-talk] SPAM-LOW: Re: Another "core" principle - virtualize capabilities

[Sandro Magi]

Jonathan S. Shapiro wrote:
> On Thu, 2007-01-04 at 06:20 -0800, Mark S. Miller wrote:
>> Marcus Brinkmann wrote:
>>> [...]   I optimistically believe
>>> that functional membrances can be implement in the kernel efficiently
>>> as a fundamental mechanism.  Furthermore, Neal has a proposal for
>>> fine-grained resource delegation without interposition, so that
>>> resource management can be done without many domain changes per
>>> request as well.
>> This sounds like a big deal. Has this proposal been explained? Did I miss it?
> 
> I don't believe it at all. Membranes must implement an MxN structure.
> Such a structure cannot be implemented in O(M+N) memory. Therefore
> membranes must allocate. Therefore they cannot be implemented in-kernel
> in a robust design.

Do you also believe this of language VM-based OS designs like
Microsoft's Singularity?

Sandro