Hi, J> The ability to extract the brand capability means that J> I can violate the integrity of the process type system. If this J> integrity is violated, the foundational chain of trust is broken because J> even the *primordial* servers cannot be reliably identified.
Been bugging me a long time... Doesn't existence of process type system preclude "field replaceability"? If any process is able to check "identity" of other process it can refuse to work with replacement implementation right? Anton _______________________________________________ L4-hurd mailing list [email protected] http://lists.gnu.org/mailman/listinfo/l4-hurd
