[HW5] Regarding the semantics of execute_with_capability

[A-H4NU]

이름 Your Name

한승우 Seungwoo Han

질문 Question

다음은 execute_with_capability에 대한 유일한 설명입니다.

Launch a new process of a given object with capability, and return Access_denied or Compromised. The first argument specifies the capability desired to be passed to the target process. The second argument denotes the target process to execute. The third argument denotes the formal parameter of the target process.

---

Process sub가 execute_with_capability(fd, obj)를 실행할 때, 다음 중 무엇이 맞는 결과인가요?

1. sub가 obj를 실행할 권한이 없다면 Access_denied를 반환하고 아니라면 obj에 해당하는 process의 (유일한) parameter에 fd의 capability를 넣고 obj를 실행
2. sub가 obj를 실행할 권한이 없고 fd가 obj에 대한 execute capability가 아니라면 Access_denied를 반환하고, 아니라면 obj에 해당하는 process의 (유일한) parameter에 fd의 capability를 넣고 obj를 실행

번역본 Translated Version

The following is the only description of execute_with_capability:

Launch a new process of a given object with capability, and return Access_denied or Compromised. The first argument specifies the capability desired to be passed to the target process. The second argument denotes the target process to execute. The third argument denotes the formal parameter of the target process.

---

Considering a case where process sub executes execute_with_capability(fd, obj), which of the following is the correct result?

1. If sub does not have permission to execute obj, return Access_denied; otherwise, pass the capability of fd to the sole parameter of the process corresponding to obj and execute obj.

2. If sub does not have permission to execute obj and if fd is not an execute capability for obj, return Access_denied; otherwise, pass the capability of fd to the sole parameter of the process corresponding to obj and execute obj.