[cap-talk] Monash as an object-cap system or not (was: Wikipedia: Object-capability model - reference vs. capability?)

Toby Murray toby.murray at comlab.ox.ac.uk
Thu Jan 11 09:46:14 CST 2007


On Thu, 2007-01-11 at 15:31 +0000, I wrote:
> On Mon, 2007-01-08 at 10:37 -0800, Mark S. Miller wrote:
> > In any case, the Monash system isn't an objcap system either, since for any 
> > cap and any subject, there exists some bit string which, if the subject did 
> > guess it, it would be able to exercise that cap. Within the rules of their 
> > system, it is only infeasible to guess such a number, not impossible.
> 
> I must be misunderstanding you. Surely E's captp URLs also suffer from
> the above but E is still an object-cap system. Or is it only the
> intra-vat portion of E that qualifies as adhering to the object-cap
> model?

Apparently I should have read further in the thread. Sorry. It's only
the non-distributed subset of E that's considered. Cool.





More information about the cap-talk mailing list