[cap-talk] Monash as an object-cap system or not (was: Wikipedia: Object-capability model - reference vs. capability?)
Toby Murray
toby.murray at comlab.ox.ac.uk
Thu Jan 11 09:46:14 CST 2007
On Thu, 2007-01-11 at 15:31 +0000, I wrote:
> On Mon, 2007-01-08 at 10:37 -0800, Mark S. Miller wrote:
> > In any case, the Monash system isn't an objcap system either, since for any
> > cap and any subject, there exists some bit string which, if the subject did
> > guess it, it would be able to exercise that cap. Within the rules of their
> > system, it is only infeasible to guess such a number, not impossible.
>
> I must be misunderstanding you. Surely E's captp URLs also suffer from
> the above but E is still an object-cap system. Or is it only the
> intra-vat portion of E that qualifies as adhering to the object-cap
> model?
Apparently I should have read further in the thread. Sorry. It's only
the non-distributed subset of E that's considered. Cool.
More information about the cap-talk
mailing list