At Wed, 19 Oct 2005 18:02:21 +0200, Marcus Brinkmann wrote: > However, just for completeness, there is another way to avoid the > problem, and that is to never copy the capability in the first place. > Instead, you just make revocable copies all along the way of the > operation you intend to perform, as arguments to RPCs to trusted > objects. This is also problematic, however (performance, breaking > abstraction).
Good point. Thanks, Neal _______________________________________________ L4-hurd mailing list [email protected] http://lists.gnu.org/mailman/listinfo/l4-hurd
