Paper.thy
changeset 14 d43f46423298
parent 13 dd1499f296ea
child 15 baa2970a9687
equal deleted inserted replaced
13:dd1499f296ea 14:d43f46423298
   532   \end{center}
   532   \end{center}
   533 
   533 
   534   \noindent
   534   \noindent
   535   Clearly the operating system should only allow to clone a process @{text p} if the 
   535   Clearly the operating system should only allow to clone a process @{text p} if the 
   536   process is currently alive. The cloned process will get the process
   536   process is currently alive. The cloned process will get the process
   537   ID ``randomly'' generated by the operating system, but this process ID should
   537   ID generated by the operating system, but this process ID should
   538   not already exist. The admissibility rules for the other events impose similar conditions. 
   538   not already exist. The admissibility rules for the other events impose similar conditions. 
   539 
   539 
   540   However, the admissibility check by the operating system is only one
   540   However, the admissibility check by the operating system is only one
   541   ``side'' of the constraints the RC-Model imposes. We also need to
   541   ``side'' of the constraints the RC-Model imposes. We also need to
   542   model the constraints of the access policy. For this we introduce
   542   model the constraints of the access policy. For this we introduce