This is how things should work:

[kpreid]

stdin, stdout, stderr, stdcpu, stdmem, stdfs

Comments

[kpreid.livejournal.com]

Yes, that's the sort of thing I had in mind. Haven't looked at Genode before (thanks for the pointer) so I don't know if it actually qualifies as a capability system, but it claims to.