Definition
Capability List
A capability list is a row-wise decomposition of the access matrix. Each domain stores a list of pairs, where one pair is called capability.
For domain , the capability list is:
Subject-Centric
Checking access is fast: the domain presents its capability, and the system verifies its authenticity. Capabilities are typically implemented as protected tokens (tickets) that cannot be forged, for example via encryption or kernel-managed references.
Examples
File Descriptor as Capability
In Unix, a file descriptor acts as a capability. The kernel validates the descriptor on each operation; user processes cannot forge valid descriptors.