Just a few questions

[Justin Emmanuel]

I just have a few questions, sorry if these have been addressed already
somewhere and I missed them, but I am curious. I have been listening to
Dr Shapiro's talks on Eros and it made me ask some questions.

1) How can the a process/kernel know that a capability really is
who/what it says it is?
2) How many capabilities can a capability have? E.G. A mouse pointer
capability loaded from a somewhere or other that also ( malevolently)
has the capability programed in to write to the hard drive?? Whats to
stop that happening? Is the user requested to give permission every time
a particular I/O operation takes place? What if you have connected a
file system ( maybe a floppy, CD ROM) and wish to copy some directories,
will it ask for permission on every object?
3) Will L4 on Hurd be using a constructor capability?
4) Does L4 have the answers to some of the questions raised by a project
like Eros?

Thanks for you patience.