R. M. Needham
Abstract
The filing system for the CAP is based on the idea of preservation of capabilities: if a program has been able to obtain some capability then it has an absolute right to preserve it for subsequent use. The pursuit of this principle, using capability-oriented mechanisms in preference to access control lists, has led to a filing system in which a preserved capability may be retrieved from different directories to achieve different access statuses, in which the significance of a text name depends on the directory to which it is presented, and in which filing system 'privilege' is expressed by possession of directory capabilities.
Get full access to this article
Purchase, subscribe or recommend this article to your librarian.
Already a Subscriber?Sign In
References
- 1 Ritchie, D.M. and Thompson, K. , The UNIX Time-Sharing System, Comm. ACM, July 1974
Google Scholar 
- 2 Lampson.B.W. and Sturgis, H.E., Reflections on an Operating System Design, Comm. ACM, May 1976
Google Scholar - 3 Needham, R.M. and Walker, R.D.H., The CAP Computer and its Protection System, SOSP6, 1977.
Google Scholar
Comments