At 12:44 AM -0800 12/18/98, Mark S. Miller wrote: ...
>Though this is not yet explained at http://www.erights.org E can do
>confinement as well. As with EROS, it does so by losing some power
>compared to KeyKOS. I've asked Norm about the two services provided by
>KeyKOS confinement but not E confinement: Hole checking and Sensory
>capabilities. About hole checking, he said that, in practice, this extra
>power wan't used by KeyLogic or its customers. Confinement without hole
>checking would have been perfectly adequate. It remains to be seen whether
>E can make do without Sensory capabilities.
This requires an essay, which I may attempt. Here: <http://www.mediacity.com/~norm/CapTheory/Retrieve.html> is an interesting hole, I think.
Whether you need sensory primitives has to do with implementation layering. I will try to write something on that.
Norman Hardy <http://www.mediacity.com/~norm>