Allows temporary increase of privileges
• Needed for modular programming
– Module pushes, pops data onto stack
module stack … endmodule.
– Variable x declared of type stack
var x: module;
– Only stack module can alter, read x
• So process doesn’t get capability, but needs it when x is referenced—
a problem!
– Solution: give process the required capabilities while it is in
module