Re: cap exchange race with map/unmap

[Marcus Brinkmann]

At Wed, 19 Oct 2005 09:38:44 -0400,
"Jonathan S. Shapiro" <address@hidden> wrote:
> > I note that the capability server as a library approach isn't being 
> > discussed
> > at the moment.  Is there something wrong with it?
> 
> As a transitional implementation for application bringup it's fine, but
> I suspect that it is insecure. Can you describe it under a new subject
> line, or point me at an existing description in the email archives?

For all practical purposes, the "library approach" is just the
capability server design, replicated in each individual server
process.  Each server has its own "capability server" built in.

So it has all the problems of the cap server, plus some.

Thanks,
Marcus