Capability, or capability-based, operating systems (OSs) are those which use, and are often structured via, capabilities (in some systems called a key), for security. Many OSs, such as Unix types, or later versions of Microsoft Windows, use privileges for security. Privileges apply to users, and are course-grained. Capabilities are somewhat similar, but apply to objects within the software environment, and are fine-grained. A capability is a communicable, unforgeable token of authority. It refers to a value that references an object, along with an associated set of access rights. User programs on capability OSs must use a capability to access an object; they are designed to directly share capabilities with each other according to the principle of least privilege, and with the OS infrastructure needed to make such transactions efficient and secure.
More information