>What about SELinux? It's moved beyond the PhD thesis stage IMO. If you consider SELinux a capability-based OS, then I guess we're using different definitions of "capability-based OS". --Ken