[cap-talk] Domain change (IPC?) overhead

[David Wagner]

Jonathan Shapiro writes:
>The domain scale that I am discussing is the one that conceptually
>replaces processes. At that boundary crossing, sharing and storage
>isolation become important issues. None of the systems that you identify
>above address this issue. IIRC, E chose not to address storage isolation
>explicitly.

Most current desktop and server OS's effectively don't address those
issues, either.  If one process decides to go hog wild and monopolize
all shared resources (e.g., all CPU), my OS will basically let it do so.
They don't even take care of accounting.

One possible interpretation of this state of affairs: people don't
consider storage isolation, accounting, and scheduling to be a
particularly important or critical security mechanism.

The above is deliberately intended as a "devil's advocate" view to try
to expand my understanding.  What do you think?