Skip to content


Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
tree: 35b719f54c
Fetching contributors…

Cannot retrieve contributors at this time

33 lines (27 sloc) 1.599 kb

[[!meta copyright="Copyright © 2007, 2008 Free Software Foundation, Inc."]]

[[!meta license="""[[!toggle id="license" text="GFDL 1.2+"]][[!toggleable id="license" text="Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation; with no Invariant Sections, no Front-Cover Texts, and no Back-Cover Texts. A copy of the license is included in the section entitled [[GNU Free Documentation License|/fdl]]."]]"""]]

The Collaborative International Dictionary of English v.0.48 defines a mechanism as:

The series of causal relations that operate to produce an effect in any system; as, the mechanism of a chemical reaction.

This is, a mechanism is a function that produces some result. As mechanisms determine the type of result, they necessarily impose some [policy]. Mechanisms that are referred to as policy-free are those that minimally impose policy.

A process can be used to encapsulate a program instance. On [[Unix]], a process is associated with a UID. This UID, in part, determines what the process is authorized to do. On a [[microkernel]], the policy that controls what resources a process may access are realized separately. This may achieved through the use of UIDs, however need not. Thus, the processes mechanism on such microkernels impose less policy than on Unix. A process is not policy free as it is possible to use other mechanisms to encapsulate a program instance, e.g., [[SFI]] and tainting ala [[Asbestos]].

Jump to Line
Something went wrong with that request. Please try again.