 In a capability-based system, handles can be passed between processes, with associated access rights.Note that in these cases the handle must be something other than a systemwide-unique small integer, otherwise it is forgeable.Such an integer may nevertheless be used to identify a capability inside a process; e.g., file descriptor in Linux is unforgeable because its numerical value alone is meaningless, and only in the process context may refer to anything.