C-list (computer security): Difference between revisions

Revision as of 18:03, 16 February 2009

Revision as of 22:14, 17 June 2009

Line 1:

In [[Object-capability model|capability-based computer security]], a '''C-list''' is an [[array data structure|array]] of capabilities, usually associated with a [[process (computing)|process]] and maintained by the [[kernel (computer science)|kernel]]. The program running in the process does not manipulate capabilities directly, but refers to them via '''C-list indexes'''—integers indexing into the C-list.

The [[file descriptor]] table in [[Unix]] is an example of a C-list. Unix processes do not manipulate file descriptors directly, but refer to them via file descriptor numbers, which are C-list indexes.