[cap-talk] "ACLs don't" paper rejected from Oakland 09
David-Sarah Hopwood
david.hopwood at industrial-designers.co.uk
Wed Feb 4 08:12:50 CST 2009
Toby Murray wrote:
> On Tue, 2009-02-03 at 16:44 +0000, David-Sarah Hopwood wrote:
>>> In the ACL case, the user can cause the compiler to write to the
>>> logfile. In the ACL case it cannot. Hence it's authority is greater.
>>
>> Right; we don't disagree on that. (More precisely, it is greater in
>> examples where the Compiler had permission to the output file
>> already, and didn't need that permission to be delegated to it.)
>
> Sorry (I keep doing this ;( ) that second "ACL case" above should have
> been "capabilities" case.
Yes, I auto-corrected that to "capability case" when I was reading it,
without noticing.
--
David-Sarah Hopwood ⚥
More information about the cap-talk
mailing list