Page 111 - slides.dvi
P. 111

•
                                                                                                    •
                                                                                •
                                                     •
                                                                         •
                                                                 •
                                                                                             –
                                         –
                                                                                       –
                                              –
                          –
   Operating
                                                                 Store
                                                                                Could
                          still
   Systems
                                                                                             messy
                                                                                                               Password
                                                                                use
   —
                                                                 ACL
                                         multiple
                                                            “principal”
                                                                                                    Capabilities
                                                                                             for
                                                     Advantages:
                          messy
                                              revocation
                                                                                       revocation
                                                                         Alternatively:
                                 Disadvantages:
                                                                                       is
                                                                 with
                                                                                                    nice
                                                            from
   Protection
                          (use
                                         “roles”
                                                                                timeouts
                                                                                                    for
                                              possible
                                                            OS).
                                                                                       tricky.
                                                                         combine
                                                                 object,
                                                                                             application,
                                                                                (e.g.
                                                                                                               Capabilities
                                                                 but
                          ‘implicit’
                                         available.
                                                                                             and
                                                                                                    distributed
                                                                 key
                                                                         passwords
                                                                 it
                                                                                Amoeba).
                          cache?).
                                                                 on
                                                                         and
                                                                                                    systems
                                                                                                    but:
                                                                 capability
                                                                         capabilities.
                                                                 (not

                                                                 implicit







                                                                 concept

                                                                 of










   107
   106   107   108   109   110   111   112   113   114   115   116