diff --git a/src/level-ext.adoc b/src/level-ext.adoc index 53a66b1f..05fd5ec8 100644 --- a/src/level-ext.adoc +++ b/src/level-ext.adoc @@ -3,7 +3,7 @@ {cheri_levels_ext_name} is an optional extension to {cheri_base_ext_name} that adds support for associating a level with capabilities and limiting flow of capabilities to specific memory region subsets. This extension allows assigning a level to capabilities, which in conjunction with two new permissions allows enforcing invariants on capability propagation. -For example, this can be used to ensure that a callee cannot save a copy of the passed in argument or to avoid sharing of compartment-local data between compartments. +For example, this can be used to ensure that a callee cannot store a copy of the passed in argument to memory or to avoid sharing of compartment-local data between compartments. The number of supported levels is configurable, but this specification currently only requires supporting two levels (_local_ and _global_). === Capability format changes