Skip to content

Commit 6bfe29b

Browse files
clarify that EL-perm is only stripped if unsealed
1 parent be4860d commit 6bfe29b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/level-ext.adoc

+1-1
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ NOTE: For `LVLBITS=1` this permission is equivalent to _StoreLocal_ in CHERI v9,
4949

5050
[#el_perm,reftext="EL-permission"]
5151
Elevate Level Permission (EL):: Any unsealed capability with its tag set to 1 that is loaded from memory has its <<el_perm>> cleared and its <<section_cap_level>> restricted to the authorizing capability's <<section_cap_level>> if the authorizing capability does not grant <<el_perm>>.
52-
If sealed, then only <<section_cap_level,CL>> is modified, <<el_perm>> is retained.
52+
If sealed, then only <<section_cap_level,CL>> is modified, <<el_perm>> is unchanged.
5353
This permission is similar to the existing <<lm_perm>>, but instead of applying to the <<w_perm>> on the loaded capability it restricts the <<section_cap_level,CL>> field.
5454

5555

0 commit comments

Comments
 (0)