Security

• Add capabilities

  • unforgeable tokens that describe a process's access rights
  • Example: process X may write to storage unit S

• Clients must present capability to the server before they can access a storage unit

• Capabilities can be passed on to other processes

• Must protect against eavesdropping: cryptography

Notes: