Struct Capability 

#[repr(C)]
pub struct Capability {
    pub object_id: u64,
    pub object_type: ObjectType,
    pub rights: CapRights,
    pub badge: u64,
    pub epoch: u64,
}

A capability is a kernel-managed, unforgeable access token.

Capabilities follow seL4’s design principles:

• No syscall succeeds without an appropriate capability handle
• A task can only grant capabilities it holds, with equal or fewer rights
• Revoking a capability invalidates all derived capabilities

Fields

object_id: u64

Unique identifier for the kernel object.

object_type: ObjectType

The type of kernel object.

rights: CapRights

Rights bitmap determining permitted operations.

badge: u64

Caller-visible identifier for demultiplexing. Allows a task to distinguish between multiple capabilities to the same underlying object.

epoch: u64

Epoch counter for capability revocation. Invalidated if the object is destroyed or the capability is revoked.

Implementations

impl Capability

pub const fn new( object_id: u64, object_type: ObjectType, rights: CapRights, badge: u64, epoch: u64, ) -> Self

Creates a new capability.

pub const fn has_rights(&self, required: CapRights) -> bool

Checks if this capability has the specified rights.

pub fn derive(&self, new_rights: CapRights, new_badge: u64) -> Option<Self>

Creates a derived capability with reduced rights.

Returns None if the requested rights are not a subset of current rights, or if attempting to derive from a GRANT_ONCE capability.

Trait Implementations

impl Clone for Capability

fn clone(&self) -> Capability

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Capability

fn eq(&self, other: &Capability) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for Capability

impl Eq for Capability

impl StructuralPartialEq for Capability