Scribit Bas Wijnen dies 01/05/2006 hora 23:20: > > > C. The child cannot have any capability that the parent couldn't > > > gain access to. > This is correct, but it isn't an extra requirement. Just like in the > constructor, the child cannot receive a capability that neither the > parent nor the instantiator possess.
Either you or I have misunderstood something in how a constructor works. I had understood that the constructor is given a set of capabilities along with the process it will instantiates. This capabilities could be out of reach for the instantiator. IIUC, it addresses the billing part of the confused deputy problem description. Confusingly, Nowhere man -- [EMAIL PROTECTED] OpenPGP 0xD9D50D8A
signature.asc
Description: Digital signature
_______________________________________________ L4-hurd mailing list [email protected] http://lists.gnu.org/mailman/listinfo/l4-hurd
