NewLC - Capabilities and executables - Comments

Re: Capabilities and executables

tote — Thu, 11 May 2006 23:15:33 +0200

Fructose,

You're right, server B can hide server C's APIs so that it doesn't enforce those strict capabilities that C does. Please note, though, that it's not trivial to write such a server (B) as holding strong capabilities requires signing the program. And signing means that server B will be reviewed and the author of that component must have good arguments for hiding the system capability enforcement of another component.

Tote

Re: Capabilities and executables

puterman — Wed, 10 May 2006 09:15:03 +0200

I suppose C feels that it has a good reason to trust A, and that it has a way to check that the request actually comes from A and not from D (which is a very destructive app, intent on destroying the universe).

Capabilities and executables

Fructose — Wed, 10 May 2006 00:03:12 +0200