Capability access management

One or more computer-readable storage devices comprising instructions that, in response to an execution by a processor:

• generate a signed custom capability description (SCCD) together with a signature in response to a custom capability description (CCD) received by the processor, the signature comprising a public key for a codesigning of a first vendor certificate in plaintext in the SCCD in a file of an application;
• send the SCCD received from a first device for a first vendor to a memory for storage;
• send the application received from a second device for a second vendor to the memory for storage;
• and
• attempt to match the application to an authorization listing of the SCCD, wherein at least one of the application or an application state is modified to allow access to a previously inaccessible custom capability in response to the application requesting a custom capability and matching to the authorization listing of the SCCD.

A system for capability access management, comprising:

• a processor;
• and
• a memory comprising instructions, that when executed on the processor, cause the processor to:
• generate a signed custom capability description (SCCD) together with a signature in response to a custom capability description (CCD) received by the processor, the signature comprising a public key for a codesigning of a first vendor certificate in plaintext in the SCCD in a file of an application;
• send the SCCD received from a first device for a first vendor to the memory for storage and to send the application received from a second device for a second vendor to the memory for storage;
• and
• attempt to match the application to an authorization listing of the SCCD, wherein at least one of the application or an application state is modified to allow access to a previously inaccessible custom capability in response to the application requesting a custom capability and matching to the authorization listing of the SCCD.