genodelabs/genode — Issue #38: Linux: explore idea of capability-based security using scm_rights (was mantis id 160)
Author: nfeske
Created: 2011-12-20 09:29:56+00:00
State: open
Labels: feature

Linux supports delegation of file descriptors via Unix-domain sockets called "SCM_RIGHTS via ancillary messages" (man 7 unix):

```
SCM_RIGHTS
Send or receive a set of open file descriptors from another process.
The data portion contains an integer array of the file descriptors.
The passed file descriptors behave as though they have been created
with dup(2).
```

A good read seems to be http://www.lst.de/~okir/blackhats/node121.html