https://www.gnu.org/software/hurd/hurd/authentication.html https://www.gnu.org/software/hurd/hurd/authentication.html It's a form of capability-based security

https://www.gnu.org/software/hurd/hurd/authentication.html https://www.gnu.org/software/hurd/hurd/authentication.html It's a form of capability-based security and it makes some forms of sandboxing or access control trivial (i.e. removing rights from processes). If you want to block a process from accessing a certain subsystem, just rmauth its session token to the server.