>Well, you also get that in Mach, and in Amoeba, and in Chorus, and in >innumerable other capability-based OSes. I'm sorry, but Chorus is not in the same class as KeyKOS and the others. They do have what they call capabilities, but they are optional and unprotected. I think your point is valid, though, that capabilities alone are pretty much researched-out.