So let's look into a new concept, this as this.
What is most acceptable, because normally in line we have to level off is what he said would be.
And that is an ongoing process is running and there's no security to perform.
Whereas if a process is running an ad on the subject, people can do this.
So there is no intermediate solution and that process will be running.
It will be over.
We don't need it on the phone.
So there's a this concept of security
where
there's a possibility that, like.
No producer can access.
I can become both I am the privileges of again here also reduce the access to all the privileges, but
this is not a good solution.
It only needed a particular privilege, but using it is getting the whole privileges.
So what capabilities and says utilize that privileges to set up evidence.
So with capabilities that the villagers account has is divided into a set of privileges.
So these privileges can now be independently assigned to the processes and the process will only contain
the required privileges and security that.
But this is the concept of intelligence.
So we forget it is only we have two kinds of users.
And if an honorable people that need something to pass on, it has to switch to a rendezvous.
And the solution which we had was what visibility?
It was getting all the privileges, which is not a good solution.
With BoSox capabilities, we can do only the capability required for the process.
So government is a medium.
If you go to this profile, it contains a list of what is available in.
So.
So you can see what our capabilities are, you see it on.
All right.
And so this is like.
Listen up.
So you can assign individual pre-process a particular capability.
So if you go to my page, you have a man page will get this.
So that's six a.m. seven.
So this mandate, if you can find out what this means.
So how can I look at this as if I did not pay our bills and get get.
So I want to the government using some answers.
So get cap on if I mean, what capabilities are there for a particular set cap?
I say the particular capabilities.
So when are we going to it?
This is all about this is.
But we just need to know the answer.
So if I want this particular capability, gaps is moot.
So it gaps.
Absolutely.
Music and.
So this allows normal user to perform reboot.
So if people come in.
OK, here it works, if only I mean, if I'm not a producer, it will not allow me to record.
So if only I have this capability, then I can perform a reboot operation for my normal application.
So what is all will not be going on that so that all these capabilities are stored this are stored in
the extended attributes of the system, so all the major systems like AXP do extra for the support,
extended attributes.
So we have seen that.
So what happens when a process tries to perform in the middle of this process?
It tries to perform a privileged operation to check whether the particular capability for the.
Well, me, the operation is available in the capital equipment, so this equipment, just as there
are laws, if no one should be made, only if the process has a particular capability, then only the
process can access that particular operation, can perform the operation else you're using.
Permission denied.