[cap-talk] Monash as an object-cap system or not (was: Wikipedia: Object-capability model - reference vs. capability?)

Toby Murray toby.murray at comlab.ox.ac.uk
Thu Jan 11 09:31:29 CST 2007


On Mon, 2007-01-08 at 10:37 -0800, Mark S. Miller wrote:
> In any case, the Monash system isn't an objcap system either, since for any 
> cap and any subject, there exists some bit string which, if the subject did 
> guess it, it would be able to exercise that cap. Within the rules of their 
> system, it is only infeasible to guess such a number, not impossible.

I must be misunderstanding you. Surely E's captp URLs also suffer from
the above but E is still an object-cap system. Or is it only the
intra-vat portion of E that qualifies as adhering to the object-cap
model?




More information about the cap-talk mailing list