[cap-talk] "ACLs don't" paper rejected from Oakland 09
Toby Murray
toby.murray at comlab.ox.ac.uk
Tue Feb 3 09:03:09 CST 2009
On Tue, 2009-02-03 at 14:51 +0000, David-Sarah Hopwood wrote:
> Toby Murray wrote:
> > Iguana and Mungi are counter-examples to this claim. See
> > http://archives.devshed.com/forums/development-94/pola-and-mungi-iguana-style-apis-520706.html
> [...]
> > This doesn't stop them being cap systems, unless you want to narrow the
> > definition of a cap system as well.
>
> I do. Considering them to be capability systems weakens the definition
> of a capability system too far. I suggest referring to systems in which
> permissions can be reified, but that don't follow the same rules as
> capability systems in how those permissions are designated and propagated,
> "reified permission systems". Capability systems would then be a subset
> of reified permission systems.
We already have a distinction here, however, between capability systems
and object-capability systems. How is your distinction different?
Cheers
Toby
More information about the cap-talk
mailing list