This is how things should work:

[kpreid]

stdin, stdout, stderr, stdcpu, stdmem, stdfs

Comments

[(Anonymous)]

Check out Genode (http://genode.org/documentation/index), it kinda works like that :)

[kpreid.livejournal.com]

Yes, that's the sort of thing I had in mind. Haven't looked at Genode before (thanks for the pointer) so I don't know if it actually qualifies as a capability system, but it claims to.