original_query: What is the purpose of capabilities in an operating system?
query: What is the purpose of capabilities in an operating system?
answer: Capabilities enhance system security by replacing forgeable references with unforgeable tokens of authority.  They specify access rights to an object, eliminating the need for access control lists (ACLs) by granting entities only the necessary capabilities.