3 ms·
In userspace, you can protect capabilities within a process by forcing people to use a capability-safe language, or you can let people use whatever and instead
by kentonv 9y ago
In userspace, you can protect capabilities within a process by forcing people to use a capability-safe language, or you can let people use whatever and instead focus on protecting capabilities between processes (or between a process and the kernel, or between machines).
- gumby 9y agoBut by definition you can’t protect capabilities between processes without the assistance of the kernel, no?