[cap-talk] [e-lang] Stamps, Guards and Parents

[Mark Miller]

http://www.erights.org/elang/kernel/auditors/
http://wiki.erights.org/wiki/Guard-based_auditing
http://www.cs.berkeley.edu/~finifter/pure-ccs08.pdf


On Fri, Feb 13, 2009 at 6:54 AM, Toby Murray <toby.murray at comlab.ox.ac.uk>wrote:

> Hi all,
>
> Apologies for cross-posting.
>
> I have a quick question. Is anyone aware of any capability patterns or
> situations in which an object is required to be stamped* by an object
> other than its parent?
>
> If I understand correctly, Jed's "MyCap?" operation is a specific
> example in which it is impossible for this situation to arise. I believe
> the KeyKOS "factory" implementation is similar, in that it doesn't allow
> an object to be "stamped" by anyone other than its parent. Is that
> right?
>
> * Here, "stamped" refers to the act of marking an object with a
> particular "trademark" which can then be checked for by corresponding a
> "guard" object. The terminology I've adopted here comes from E.
>
> Cheers
>
> Toby
>
>
>
> _______________________________________________
> e-lang mailing list
> e-lang at mail.eros-os.org
> http://www.eros-os.org/mailman/listinfo/e-lang
>



-- 
Text by me above is hereby placed in the public domain

   Cheers,
   --MarkM
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.eros-os.org/pipermail/cap-talk/attachments/20090213/f65870da/attachment.html