noun A digital token allowing a user or process to interact in a specified way with an object that is subject to access control. .mw-parser-output .defdate{font-size:smaller}
A file descriptor can be considered a capability that can only be leveraged using the appropriate system calls, passing it as an argument.