School of Computer Science & Engineering
University of New South Wales
Advanced Operating Systems
COMP9242 2002/S2
Next: Discretionary Confinement in Mungi
Up: 12-mungi
Previous: Protected Procedure Calls
- All capability presentation is implicit (via clists).
- A thread can manipulate its protection domain:
- by modifying its clists,
- provided that the APD contains the clists.
- A thread can be set up so that it's APD:
- does not contain the clists defining it,
- does not contain write access to any ``public'' objects.
- Such a thread is confined.
Gernot Heiser
2002-10-24