This is how things should work:

[kpreid]

stdin, stdout, stderr, stdcpu, stdmem, stdfs

Comments

[anonymous]

Check out Genode, it kinda works like that :)

[kpreid]

Yes, that's the sort of thing I had in mind. Haven't looked at Genode before (thanks for the pointer) so I don't know if it actually qualifies as a capability system, but it claims to.