Q. Capability lists are typically kept within the address space of the user. How does the system make sure that the user cannot modify the contents of the list?
Answer: An aptitude list is considered a "protected object" as well as is accessed only indirectly by the user. The operating system makes sure the user cannot access the capability list directly.