C-list (computer security)

In <a href="/facts/Object-capability_model/1Q0caFf5">capability-based computer security</a>, a C-list is an <a href="/facts/Array_(data_structure)/BKGvF8AM">array</a> of capabilities, usually associated with a <a href="/facts/Process_(computing)/Vcq7EnUV">process</a> and maintained by the <a href="/facts/Kernel_(operating_system)/uEj4U3Rz">kernel</a>. The program running in the process does not manipulate capabilities directly, but refers to them via C-list indexes—integers indexing into the C-list.
The <a href="/facts/File_descriptor/Iw74UKqG">file descriptor table</a> in <a href="/facts/Unix/0pNL2seI">Unix</a> is an example of a C-list. Unix processes do not manipulate <a href="/facts/File_descriptor/Iw74UKqG">file descriptors</a> directly, but refer to them via file descriptor numbers, which are C-list indexes.
In the <a href="/facts/KeyKOS/TNKAuUmV">KeyKOS</a> and <a href="/facts/EROS_(microkernel)/otH0PLPh">EROS</a> operating systems, a process's capability registers constitute a C-list.

C-list (computer security) open-in-new

C-list (computer security)