Back

I find it hard to teach capability-based access control. One issue is that the only concrete reference is Unix, and that combines both ACLs and capabilities. The design is clever but a side-effect is that the overall picture becomes muddled in students' minds.

I could imagine a vaguely Unix-like OS that is entirely capabilities, no ACLs. And I could imagine some kind of diagram or animation showing how capabilities flow around the system. Is anyone ahead of me on this? Hmm... maybe next year.