No. It has a user-visible idea of "capabilities" in the sense that apps get a checklist of things they can and cannot access, but that's not "capability based security," just another access control list.
Capability based security like Fuchsia has means that there is no ambient authority, or in other words no singleton resources. No fopen(), no connect(), etc. Instead, processes access everything through file-handle-like objects that are given to them by their creator, which can thus be sandboxed/mocked/revoked/etc without anything extra like containers or jails or VMs.
Capability based security like Fuchsia has means that there is no ambient authority, or in other words no singleton resources. No fopen(), no connect(), etc. Instead, processes access everything through file-handle-like objects that are given to them by their creator, which can thus be sandboxed/mocked/revoked/etc without anything extra like containers or jails or VMs.