These are some notes that bear on the section (clocks). They may not contradict it. This belongs somewhere else!

Since programs have no inaliable rights, they have no rights to real time. Some may imagine that their programs have an implicit right to read the 370 TOD in order to enforce a contract arangement. This requires cooperation of the machine operator, however.


The problem with covert channels may be solved by providing different clock objects to different security domains. Such clocks may run at speeds related to the scheduling of their holders. This is like a virtual TOD.

Consequences of multiple clocks: