[cap-talk] Yes. (was: Can we stop discussing Butler

[Norman Hardy]

On 2008 Apr 11, at 9:25 , Charles Forsyth wrote:

>> I believe that in Cal/TSS the sending of a message to another
>> 'process' designated the recipient by an unprotected global integer.
>> This is a fatal design in the modern capabilities view.
>
> event channels (queues) were accessed through capabilities.
>
> http://www.mcjones.org/CalTSS/CalTSS.pdf points to a good handful of  
> papers and
> reports about the system.  i particularly liked the more abstract  
> IBM report
> "The Control Structure of an Operating System", which had a big  
> influence on me when it first appeared.
> i remember writing a heavily stripped-down subset once in B, to get  
> the feel of it.

I agree that the paper you reference describes messages as directed  
thru channels via capabilities and thus avoids the problem I referred  
to.
I don't know where I got the mistaken idea; perhaps from an earlier  
preliminary document.