An unforgeable reference carrying authority to perform specified operations on an object. In seL4, the operating-system kernel stores security capabilities in protected slots; an integer naming a slot is not itself freely forgeable authority. Guessing another operating-system process's slot number does not give access to its security capability. [ref]
Capabilities tutorial by seL4 Project. Capabilities tutorial, Background: What is a capability?; CNodes and CSlots
A security capability authorizing a reply to a particular waiting caller. In the seL4 tutorial's IPC model, a call establishes one-time reply authority, allowing a user-space service to return to the correct client. The exact representation depends on the operating-system kernel configuration. [ref]
IPC tutorial by seL4 Project. IPC tutorial, Background: System calls, seL4_Call and reply capabilities
Articles by others on the same topic
There are currently no matching articles.