Const (Insecure Sensory) Keys

[Jonathan Shapiro]

   Actually, I think both kinds of sensory keys could, at least conceptually,
   be seen as simply part of the "standard" object protocol that all
   kernel-implemented objects, and some user objects, may implement.

Bryan has identified a feature that appears to be missing in KeyKOS
that I think is worth considering.  He has essentially invented a
"const" key - a weakened form of sensory key that does not violate
encapsulation.  "const" is a key attribute, and the invocation of a
const key is made visible to domains by some bit in the message
protocol.

This strikes me as highly parallel to the C++ notion of const, which
is empirically very useful.

I'ld appreciate reactions from the KeyKOS crowd.


Jonathan