On Thu, Dec 1, 2016 at 2:20 PM, <Kofidoku.Atuah@data61.csiro.au> wrote:

"capability-pointers" (CPtrs), which are not to be confused with "capabilities", which are themselves also kernel-objects (and therefore, inaccessible to userspace)

That's an enlightening distinction. I wish I'd been thinking about it that way earlier! Thanks. :-)