Re: Challenge: Find potential use cases for non-trivial confinement

[Marcus Brinkmann]

At Tue, 2 May 2006 00:12:39 +0200,
Pierre THIERRY <address@hidden> wrote:
> 
> [1  <multipart/signed (7bit)>]
> [1.1  <text/plain; us-ascii (quoted-printable)>]
> Scribit Marcus Brinkmann dies 01/05/2006 hora 14:10:
> > From the three groups above, only the relationship (1) allows full
> > virtualization, for example of the space bank, of the second process.
> 
> Could you elaborate an this point? Could you describe what you mean by
> virtualization, and how exactly it is broken by the second case?

By virtualizing a capability I mean the action of replacing it with a
different capability.

This simple definition makes clear that if an instantiated process has
access to capabilities provided by some other entitity than the
instantiator, the instantiator can not successfully virtualize these
capabilities.

Thanks,
Marcus