[coyotos-dev] Explicit Persistence Considered Harmful

[Jonathan S. Shapiro]

On Fri, 2008-08-22 at 11:56 -0400, Jonathan S. Shapiro wrote:
> I assume there exists a privileged server that will store triples of the
> form
> 
>    (host-unique-id, index, durable capability)


Just a side note on this: this server is clearly part of the TCB, but
externalizing capabilities from the kernel in this way is not
intrinsically problematic.


shap