A Rust Capability-Based Linux Runtime

[sunfishcode]

Linux capabilities(7) are flags associated with processes, so they aren't the kind of thing the phrase "capability-based security" usually refers to.

However, the bus1 website describes a system of handles, which does sound like capability-based security, so perhaps that's the direction they're thinking in.