Re: Stamps, Guards and Parents
Mark Miller <[email protected]>
| Newsgroups | gmane.comp.lang.e.general,gmane.comp.capabilities.general |
|---|---|
| Message-ID | <[email protected]> |
http://www.erights.org/elang/kernel/auditors/ http://wiki.erights.org/wiki/Guard-based_auditing http://www.cs.berkeley.edu/~finifter/pure-ccs08.pdf On Fri, Feb 13, 2009 at 6:54 AM, Toby Murray <[email protected]>wrote: > Hi all, > > Apologies for cross-posting. > > I have a quick question. Is anyone aware of any capability patterns or > situations in which an object is required to be stamped* by an object > other than its parent? > > If I understand correctly, Jed's "MyCap?" operation is a specific > example in which it is impossible for this situation to arise. I believe > the KeyKOS "factory" implementation is similar, in that it doesn't allow > an object to be "stamped" by anyone other than its parent. Is that > right? > > * Here, "stamped" refers to the act of marking an object with a > particular "trademark" which can then be checked for by corresponding a > "guard" object. The terminology I've adopted here comes from E. > > Cheers > > Toby > > > > _______________________________________________ > e-lang mailing list > [email protected] > http://www.eros-os.org/mailman/listinfo/e-lang > -- Text by me above is hereby placed in the public domain Cheers, --MarkM _______________________________________________ e-lang mailing list [email protected] http://www.eros-os.org/mailman/listinfo/e-lang