diff --git a/services/libs/jinux-rights/Cargo.toml b/services/libs/jinux-rights/Cargo.toml
new file mode 100644
index 000000000..758231ac5
--- /dev/null
+++ b/services/libs/jinux-rights/Cargo.toml
@@ -0,0 +1,14 @@
+[package]
+name = "jinux-rights"
+version = "0.1.0"
+edition = "2021"
+
+# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
+
+[dependencies]
+typeflags = { path = "../typeflags" }
+typeflags-util = { path = "../typeflags-util" }
+bitflags = "1.3"
+jinux-rights-proc = { path = "../jinux-rights-proc" }
+
+[features]
diff --git a/services/libs/jinux-std/src/rights.rs b/services/libs/jinux-rights/src/lib.rs
similarity index 70%
rename from services/libs/jinux-std/src/rights.rs
rename to services/libs/jinux-rights/src/lib.rs
index 8988f8706..2c2266c4b 100644
--- a/services/libs/jinux-std/src/rights.rs
+++ b/services/libs/jinux-rights/src/lib.rs
@@ -1,7 +1,8 @@
-use bitflags::bitflags;
-use typeflags::typeflags;
+#![no_std]
 
-bitflags! {
+use core::ops::{Deref, DerefMut};
+
+bitflags::bitflags! {
     /// Value-based access rights.
     ///
     /// These access rights are provided to cover a wide range of use cases.
@@ -24,7 +25,7 @@ bitflags! {
     }
 }
 
-typeflags! {
+typeflags::typeflags! {
     /// Type-based access rights.
     ///
     /// Similar to value-based access rights (`Rights`), but represented in
@@ -46,6 +47,41 @@ typeflags! {
 }
 
 /// The full set of access rights.
-pub type Full = TRights![Dup, Read, Write, Exec, Signal];
+pub type Full = TRightSet<TRights![Dup, Read, Write, Exec, Signal]>;
 pub type ReadOp = TRights![Read];
 pub type WriteOp = TRights![Write];
+
+/// Wrapper for TRights, used to bypass an error message from the Rust compiler,
+/// the relevant issue is: https://github.com/rust-lang/rfcs/issues/2758
+///
+/// Example:
+///
+/// ```rust
+/// pub struct Vmo<R=Rights>(R);
+///
+/// impl<R:TRights> Vmo<TRightSet<R>>{
+///     //...
+/// }
+///
+/// impl Vmo<Rights>{
+///     //...
+/// }
+///
+/// ```
+///
+#[derive(Clone, Copy)]
+pub struct TRightSet<T>(pub T);
+
+impl<T> Deref for TRightSet<T> {
+    type Target = T;
+
+    fn deref(&self) -> &Self::Target {
+        &self.0
+    }
+}
+
+impl<T> DerefMut for TRightSet<T> {
+    fn deref_mut(&mut self) -> &mut Self::Target {
+        &mut self.0
+    }
+}
diff --git a/services/libs/jinux-std/Cargo.toml b/services/libs/jinux-std/Cargo.toml
index 677ef209d..7c81c9e10 100644
--- a/services/libs/jinux-std/Cargo.toml
+++ b/services/libs/jinux-std/Cargo.toml
@@ -12,6 +12,7 @@ pod = { git = "https://github.com/jinzhao-dev/pod", rev = "7fa2ed2" }
 jinux-input = { path = "../../comps/input" }
 jinux-block = { path = "../../comps/block" }
 jinux-time = { path = "../../comps/time" }
+jinux-rights = { path = "../jinux-rights" }
 controlled = { path = "../../libs/comp-sys/controlled" }
 typeflags = { path = "../typeflags" }
 typeflags-util = { path = "../typeflags-util" }
diff --git a/services/libs/jinux-std/src/fs/inode_handle/dyn_cap.rs b/services/libs/jinux-std/src/fs/inode_handle/dyn_cap.rs
index ed67bbc7d..b36f729af 100644
--- a/services/libs/jinux-std/src/fs/inode_handle/dyn_cap.rs
+++ b/services/libs/jinux-std/src/fs/inode_handle/dyn_cap.rs
@@ -1,5 +1,5 @@
 use crate::prelude::*;
-use crate::rights::{Rights, TRights};
+use jinux_rights::{Rights, TRights};
 
 use super::*;
 
diff --git a/services/libs/jinux-std/src/fs/inode_handle/mod.rs b/services/libs/jinux-std/src/fs/inode_handle/mod.rs
index 721601548..a24768a37 100644
--- a/services/libs/jinux-std/src/fs/inode_handle/mod.rs
+++ b/services/libs/jinux-std/src/fs/inode_handle/mod.rs
@@ -11,7 +11,7 @@ use crate::fs::utils::{
     StatusFlags,
 };
 use crate::prelude::*;
-use crate::rights::Rights;
+use jinux_rights::Rights;
 
 pub struct InodeHandle<R = Rights>(Arc<InodeHandle_>, R);
 
diff --git a/services/libs/jinux-std/src/fs/inode_handle/static_cap.rs b/services/libs/jinux-std/src/fs/inode_handle/static_cap.rs
index 0e4ca9c8f..dcd525df7 100644
--- a/services/libs/jinux-std/src/fs/inode_handle/static_cap.rs
+++ b/services/libs/jinux-std/src/fs/inode_handle/static_cap.rs
@@ -1,10 +1,10 @@
 use crate::prelude::*;
-use crate::rights::*;
+use jinux_rights::{Read, TRightSet, TRights, Write};
 use jinux_rights_proc::require;
 
 use super::*;
 
-impl<R: TRights> InodeHandle<R> {
+impl<R: TRights> InodeHandle<TRightSet<R>> {
     #[require(R > Read)]
     pub fn read(&self, buf: &mut [u8]) -> Result<usize> {
         self.0.read(buf)
diff --git a/services/libs/jinux-std/src/fs/utils/access_mode.rs b/services/libs/jinux-std/src/fs/utils/access_mode.rs
index 62c0e3eb9..352d81f4b 100644
--- a/services/libs/jinux-std/src/fs/utils/access_mode.rs
+++ b/services/libs/jinux-std/src/fs/utils/access_mode.rs
@@ -1,5 +1,5 @@
 use crate::prelude::*;
-use crate::rights::Rights;
+use jinux_rights::Rights;
 
 #[allow(non_camel_case_types)]
 #[derive(Clone, Copy, Debug)]
diff --git a/services/libs/jinux-std/src/fs/utils/channel.rs b/services/libs/jinux-std/src/fs/utils/channel.rs
index 5c2dd9b0d..c1a277ae0 100644
--- a/services/libs/jinux-std/src/fs/utils/channel.rs
+++ b/services/libs/jinux-std/src/fs/utils/channel.rs
@@ -4,7 +4,7 @@ use ringbuf::{HeapConsumer as HeapRbConsumer, HeapProducer as HeapRbProducer, He
 
 use crate::events::Observer;
 use crate::prelude::*;
-use crate::rights::*;
+use jinux_rights::{Read, ReadOp, TRights, Write, WriteOp};
 
 use super::{IoEvents, Pollee, Poller, StatusFlags};
 
diff --git a/services/libs/jinux-std/src/fs/utils/page_cache.rs b/services/libs/jinux-std/src/fs/utils/page_cache.rs
index a37844c4c..021cbe1bc 100644
--- a/services/libs/jinux-std/src/fs/utils/page_cache.rs
+++ b/services/libs/jinux-std/src/fs/utils/page_cache.rs
@@ -1,7 +1,7 @@
 use super::Inode;
 use crate::prelude::*;
-use crate::rights::Full;
 use crate::vm::vmo::{Pager, Vmo, VmoFlags, VmoOptions};
+use jinux_rights::Full;
 
 use core::ops::Range;
 use jinux_frame::vm::{VmAllocOptions, VmFrame, VmFrameVec};
diff --git a/services/libs/jinux-std/src/fs/utils/vnode.rs b/services/libs/jinux-std/src/fs/utils/vnode.rs
index e4b947c97..f54060425 100644
--- a/services/libs/jinux-std/src/fs/utils/vnode.rs
+++ b/services/libs/jinux-std/src/fs/utils/vnode.rs
@@ -4,12 +4,12 @@ use super::{
 };
 use crate::fs::device::Device;
 use crate::prelude::*;
-use crate::rights::Full;
 use crate::vm::vmo::Vmo;
 
 use alloc::string::String;
 use core::time::Duration;
 use jinux_frame::vm::VmIo;
+use jinux_rights::Full;
 
 /// VFS-level representation of an inode
 #[derive(Clone)]
diff --git a/services/libs/jinux-std/src/lib.rs b/services/libs/jinux-std/src/lib.rs
index 598e97fad..7f2c51b45 100644
--- a/services/libs/jinux-std/src/lib.rs
+++ b/services/libs/jinux-std/src/lib.rs
@@ -38,7 +38,6 @@ pub mod events;
 pub mod fs;
 pub mod prelude;
 mod process;
-pub mod rights;
 pub mod syscall;
 pub mod thread;
 pub mod time;
diff --git a/services/libs/jinux-std/src/process/clone.rs b/services/libs/jinux-std/src/process/clone.rs
index e3587cfbd..ffb3bd477 100644
--- a/services/libs/jinux-std/src/process/clone.rs
+++ b/services/libs/jinux-std/src/process/clone.rs
@@ -4,6 +4,8 @@ use jinux_frame::{
     vm::{VmIo, VmSpace},
 };
 
+use jinux_rights::Full;
+
 use crate::{
     current_thread,
     fs::file_table::FileTable,
@@ -15,7 +17,6 @@ use crate::{
         },
         process_table,
     },
-    rights::Full,
     thread::{allocate_tid, thread_table, Thread, Tid},
     util::write_val_to_user,
     vm::vmar::Vmar,
diff --git a/services/libs/jinux-std/src/process/mod.rs b/services/libs/jinux-std/src/process/mod.rs
index db89a4e4c..fd099fe28 100644
--- a/services/libs/jinux-std/src/process/mod.rs
+++ b/services/libs/jinux-std/src/process/mod.rs
@@ -16,10 +16,10 @@ use crate::fs::file_table::FileTable;
 use crate::fs::fs_resolver::FsResolver;
 use crate::fs::utils::FileCreationMask;
 use crate::prelude::*;
-use crate::rights::Full;
 use crate::thread::{allocate_tid, thread_table, Thread};
 use crate::vm::vmar::Vmar;
 use jinux_frame::sync::WaitQueue;
+use jinux_rights::Full;
 
 pub mod clone;
 pub mod fifo_scheduler;
diff --git a/services/libs/jinux-std/src/process/posix_thread/posix_thread_ext.rs b/services/libs/jinux-std/src/process/posix_thread/posix_thread_ext.rs
index 6300f44da..0dbfbe2fe 100644
--- a/services/libs/jinux-std/src/process/posix_thread/posix_thread_ext.rs
+++ b/services/libs/jinux-std/src/process/posix_thread/posix_thread_ext.rs
@@ -1,10 +1,10 @@
 use jinux_frame::{cpu::UserContext, user::UserSpace};
+use jinux_rights::Full;
 
 use crate::{
     fs::fs_resolver::FsResolver,
     prelude::*,
     process::{program_loader::load_program_to_root_vmar, Process},
-    rights::Full,
     thread::{Thread, Tid},
     vm::vmar::Vmar,
 };
diff --git a/services/libs/jinux-std/src/process/process_vm/mod.rs b/services/libs/jinux-std/src/process/process_vm/mod.rs
index 023e1442a..02903e4ed 100644
--- a/services/libs/jinux-std/src/process/process_vm/mod.rs
+++ b/services/libs/jinux-std/src/process/process_vm/mod.rs
@@ -8,9 +8,10 @@ pub mod mmap_flags;
 pub mod user_heap;
 
 use crate::prelude::*;
+use jinux_rights::Full;
 use user_heap::UserHeap;
 
-use crate::{rights::Full, vm::vmar::Vmar};
+use crate::vm::vmar::Vmar;
 
 /*
 * The user vm space layout is look like below.
diff --git a/services/libs/jinux-std/src/process/process_vm/user_heap.rs b/services/libs/jinux-std/src/process/process_vm/user_heap.rs
index 69a9ed7e8..99f311b29 100644
--- a/services/libs/jinux-std/src/process/process_vm/user_heap.rs
+++ b/services/libs/jinux-std/src/process/process_vm/user_heap.rs
@@ -1,14 +1,13 @@
 use core::sync::atomic::{AtomicUsize, Ordering};
 
-use crate::rights::Full;
 use crate::vm::perms::VmPerms;
 use crate::vm::vmar::Vmar;
 use crate::{
     prelude::*,
-    rights::Rights,
     vm::vmo::{VmoFlags, VmoOptions},
 };
 use align_ext::AlignExt;
+use jinux_rights::{Full, Rights};
 
 pub const USER_HEAP_BASE: Vaddr = 0x0000_0000_1000_0000;
 pub const USER_HEAP_SIZE_LIMIT: usize = PAGE_SIZE * 1000;
diff --git a/services/libs/jinux-std/src/process/program_loader/elf/init_stack.rs b/services/libs/jinux-std/src/process/program_loader/elf/init_stack.rs
index 5d1d5ff71..bb6108226 100644
--- a/services/libs/jinux-std/src/process/program_loader/elf/init_stack.rs
+++ b/services/libs/jinux-std/src/process/program_loader/elf/init_stack.rs
@@ -2,16 +2,15 @@
 //! The process initial stack, contains arguments, environmental variables and auxiliary vectors
 //! The data layout of init stack can be seen in Figure 3.9 in https://uclibc.org/docs/psABI-x86_64.pdf
 
-use crate::rights::Rights;
 use crate::vm::perms::VmPerms;
 use crate::{
     prelude::*,
-    rights::Full,
     vm::{vmar::Vmar, vmo::VmoOptions},
 };
 use align_ext::AlignExt;
 use core::mem;
 use jinux_frame::vm::{VmIo, VmPerm};
+use jinux_rights::{Full, Rights};
 
 use super::aux_vec::{AuxKey, AuxVec};
 use super::elf_file::Elf;
diff --git a/services/libs/jinux-std/src/process/program_loader/elf/load_elf.rs b/services/libs/jinux-std/src/process/program_loader/elf/load_elf.rs
index 1a607e816..f9f4ede71 100644
--- a/services/libs/jinux-std/src/process/program_loader/elf/load_elf.rs
+++ b/services/libs/jinux-std/src/process/program_loader/elf/load_elf.rs
@@ -4,16 +4,15 @@
 use crate::fs::fs_resolver::{FsPath, FsResolver, AT_FDCWD};
 use crate::fs::utils::Dentry;
 use crate::process::program_loader::elf::init_stack::{init_aux_vec, InitStack};
-use crate::rights::Rights;
 use crate::vm::perms::VmPerms;
 use crate::vm::vmo::{VmoOptions, VmoRightsOp};
 use crate::{
     prelude::*,
-    rights::Full,
     vm::{vmar::Vmar, vmo::Vmo},
 };
 use align_ext::AlignExt;
 use jinux_frame::vm::{VmIo, VmPerm};
+use jinux_rights::{Full, Rights};
 use xmas_elf::program::{self, ProgramHeader64};
 
 use super::elf_file::Elf;
diff --git a/services/libs/jinux-std/src/process/program_loader/mod.rs b/services/libs/jinux-std/src/process/program_loader/mod.rs
index 94c2f47f8..e5648f2e5 100644
--- a/services/libs/jinux-std/src/process/program_loader/mod.rs
+++ b/services/libs/jinux-std/src/process/program_loader/mod.rs
@@ -3,8 +3,8 @@ mod shebang;
 
 use crate::fs::fs_resolver::{FsPath, FsResolver, AT_FDCWD};
 use crate::prelude::*;
-use crate::rights::Full;
 use crate::vm::vmar::Vmar;
+use jinux_rights::Full;
 
 use self::elf::{load_elf_to_root_vmar, ElfLoadInfo};
 use self::shebang::parse_shebang_line;
diff --git a/services/libs/jinux-std/src/syscall/mmap.rs b/services/libs/jinux-std/src/syscall/mmap.rs
index 3478e1a88..790324f65 100644
--- a/services/libs/jinux-std/src/syscall/mmap.rs
+++ b/services/libs/jinux-std/src/syscall/mmap.rs
@@ -2,12 +2,12 @@
 
 use crate::fs::file_table::FileDescripter;
 use crate::process::process_vm::mmap_flags::MMapFlags;
-use crate::rights::Rights;
 use crate::vm::perms::VmPerms;
 use crate::vm::vmo::{VmoChildOptions, VmoOptions, VmoRightsOp};
 use crate::{log_syscall_entry, prelude::*};
 use align_ext::AlignExt;
 use jinux_frame::vm::VmPerm;
+use jinux_rights::Rights;
 
 use crate::syscall::SYS_MMAP;
 
diff --git a/services/libs/jinux-std/src/vm/perms.rs b/services/libs/jinux-std/src/vm/perms.rs
index 2e975a481..2e3794f6a 100644
--- a/services/libs/jinux-std/src/vm/perms.rs
+++ b/services/libs/jinux-std/src/vm/perms.rs
@@ -1,6 +1,6 @@
-use crate::rights::Rights;
 use bitflags::bitflags;
 use jinux_frame::vm::VmPerm;
+use jinux_rights::Rights;
 
 bitflags! {
     /// The memory access permissions of memory mappings.
diff --git a/services/libs/jinux-std/src/vm/vmar/dyn_cap.rs b/services/libs/jinux-std/src/vm/vmar/dyn_cap.rs
index 00286c966..cef1dd617 100644
--- a/services/libs/jinux-std/src/vm/vmar/dyn_cap.rs
+++ b/services/libs/jinux-std/src/vm/vmar/dyn_cap.rs
@@ -1,12 +1,10 @@
 use core::ops::Range;
 use jinux_frame::vm::{Vaddr, VmIo};
+use jinux_rights::Rights;
 
 use crate::prelude::*;
 
-use crate::{
-    rights::Rights,
-    vm::{page_fault_handler::PageFaultHandler, vmo::Vmo},
-};
+use crate::vm::{page_fault_handler::PageFaultHandler, vmo::Vmo};
 
 use super::{
     options::VmarChildOptions, vm_mapping::VmarMapOptions, VmPerms, Vmar, VmarRightsOp, Vmar_,
diff --git a/services/libs/jinux-std/src/vm/vmar/mod.rs b/services/libs/jinux-std/src/vm/vmar/mod.rs
index 71d1a556f..a07851cfe 100644
--- a/services/libs/jinux-std/src/vm/vmar/mod.rs
+++ b/services/libs/jinux-std/src/vm/vmar/mod.rs
@@ -6,8 +6,6 @@ mod static_cap;
 pub mod vm_mapping;
 
 use crate::prelude::*;
-use crate::rights::Full;
-use crate::rights::Rights;
 use crate::vm::perms::VmPerms;
 use align_ext::AlignExt;
 use alloc::collections::BTreeMap;
@@ -16,6 +14,7 @@ use alloc::sync::Weak;
 use alloc::vec::Vec;
 use core::ops::Range;
 use jinux_frame::vm::VmSpace;
+use jinux_rights::{Dup, Exec, Full, Read, Rights, Signal, TRightSet, TRights, Write};
 
 use self::vm_mapping::VmMapping;
 
@@ -719,7 +718,10 @@ impl<R> Vmar<R> {
         let rights = Rights::all();
         self.check_rights(rights)?;
         let vmar_ = self.0.fork_vmar_(Weak::new())?;
-        Ok(Vmar(vmar_, Full::new()))
+        Ok(Vmar(
+            vmar_,
+            TRightSet(<TRights![Dup, Read, Write, Exec, Signal]>::new()),
+        ))
     }
 
     /// get a mapped vmo
diff --git a/services/libs/jinux-std/src/vm/vmar/options.rs b/services/libs/jinux-std/src/vm/vmar/options.rs
index 63bb29515..c478ec69c 100644
--- a/services/libs/jinux-std/src/vm/vmar/options.rs
+++ b/services/libs/jinux-std/src/vm/vmar/options.rs
@@ -138,11 +138,9 @@ mod test {
     use crate::vm::page_fault_handler::PageFaultHandler;
     use crate::vm::perms::VmPerms;
     use crate::vm::vmo::VmoRightsOp;
-    use crate::{
-        rights::Full,
-        vm::{vmar::ROOT_VMAR_HIGHEST_ADDR, vmo::VmoOptions},
-    };
+    use crate::vm::{vmar::ROOT_VMAR_HIGHEST_ADDR, vmo::VmoOptions};
     use jinux_frame::vm::VmIo;
+    use jinux_rights::Full;
 
     #[test]
     fn root_vmar() {
diff --git a/services/libs/jinux-std/src/vm/vmar/static_cap.rs b/services/libs/jinux-std/src/vm/vmar/static_cap.rs
index 6d9269f76..34fe8bd84 100644
--- a/services/libs/jinux-std/src/vm/vmar/static_cap.rs
+++ b/services/libs/jinux-std/src/vm/vmar/static_cap.rs
@@ -2,18 +2,16 @@ use core::ops::Range;
 
 use crate::prelude::*;
 use jinux_frame::vm::VmIo;
+use jinux_rights::{Dup, Read, Rights, TRightSet, TRights};
 use jinux_rights_proc::require;
 
-use crate::{
-    rights::{Dup, Read, Rights, TRights},
-    vm::{page_fault_handler::PageFaultHandler, vmo::Vmo},
-};
+use crate::vm::{page_fault_handler::PageFaultHandler, vmo::Vmo};
 
 use super::{
     options::VmarChildOptions, vm_mapping::VmarMapOptions, VmPerms, Vmar, VmarRightsOp, Vmar_,
 };
 
-impl<R: TRights> Vmar<R> {
+impl<R: TRights> Vmar<TRightSet<R>> {
     /// Creates a root VMAR.
     ///
     /// # Access rights
@@ -22,7 +20,7 @@ impl<R: TRights> Vmar<R> {
     pub fn new_root() -> Result<Self> {
         let inner = Arc::new(Vmar_::new_root()?);
         let rights = R::new();
-        let new_self = Self(inner, rights);
+        let new_self = Self(inner, TRightSet(rights));
         Ok(new_self)
     }
 
@@ -34,7 +32,7 @@ impl<R: TRights> Vmar<R> {
     /// use jinux_std::prelude::*;
     /// use jinux_std::vm::{PAGE_SIZE, Vmar, VmoOptions};
     ///
-    /// let vmar = Vmar::<Full>::new().unwrap();
+    /// let vmar = Vmar::<RightsWrapper<Full>>::new().unwrap();
     /// let vmo = VmoOptions::new(PAGE_SIZE).alloc().unwrap();
     /// let target_vaddr = 0x1234000;
     /// let real_vaddr = vmar
@@ -62,7 +60,11 @@ impl<R: TRights> Vmar<R> {
     /// which ensures that any updated memory permissions do not go beyond
     /// the access rights of the underlying VMOs.
     #[require(R > Dup)]
-    pub fn new_map(&self, vmo: Vmo<Rights>, perms: VmPerms) -> Result<VmarMapOptions<R, Rights>> {
+    pub fn new_map(
+        &self,
+        vmo: Vmo<Rights>,
+        perms: VmPerms,
+    ) -> Result<VmarMapOptions<TRightSet<R>, Rights>> {
         let dup_self = self.dup()?;
         Ok(VmarMapOptions::new(dup_self, vmo, perms))
     }
@@ -87,7 +89,7 @@ impl<R: TRights> Vmar<R> {
     /// The new VMAR child will be of the same capability class and
     /// access rights as the parent.
     #[require(R > Dup)]
-    pub fn new_child(&self, size: usize) -> Result<VmarChildOptions<R>> {
+    pub fn new_child(&self, size: usize) -> Result<VmarChildOptions<TRightSet<R>>> {
         let dup_self = self.dup()?;
         Ok(VmarChildOptions::new(dup_self, size))
     }
@@ -169,7 +171,7 @@ impl<R: TRights> Vmar<R> {
     }
 }
 
-impl<R: TRights> VmIo for Vmar<R> {
+impl<R: TRights> VmIo for Vmar<TRightSet<R>> {
     fn read_bytes(&self, offset: usize, buf: &mut [u8]) -> jinux_frame::Result<()> {
         self.check_rights(Rights::READ)?;
         self.0.read(offset, buf)?;
@@ -183,7 +185,7 @@ impl<R: TRights> VmIo for Vmar<R> {
     }
 }
 
-impl<R: TRights> PageFaultHandler for Vmar<R> {
+impl<R: TRights> PageFaultHandler for Vmar<TRightSet<R>> {
     fn handle_page_fault(
         &self,
         page_fault_addr: Vaddr,
@@ -200,7 +202,7 @@ impl<R: TRights> PageFaultHandler for Vmar<R> {
     }
 }
 
-impl<R: TRights> VmarRightsOp for Vmar<R> {
+impl<R: TRights> VmarRightsOp for Vmar<TRightSet<R>> {
     fn rights(&self) -> Rights {
         Rights::from_bits(R::BITS).unwrap()
     }
diff --git a/services/libs/jinux-std/src/vm/vmo/dyn_cap.rs b/services/libs/jinux-std/src/vm/vmo/dyn_cap.rs
index 1dbec4a51..2b30c69eb 100644
--- a/services/libs/jinux-std/src/vm/vmo/dyn_cap.rs
+++ b/services/libs/jinux-std/src/vm/vmo/dyn_cap.rs
@@ -4,7 +4,7 @@ use crate::prelude::*;
 
 use jinux_frame::vm::VmIo;
 
-use crate::rights::{Rights, TRights};
+use jinux_rights::{Rights, TRights};
 
 use super::VmoRightsOp;
 use super::{
diff --git a/services/libs/jinux-std/src/vm/vmo/mod.rs b/services/libs/jinux-std/src/vm/vmo/mod.rs
index 311868de2..eb7bffd69 100644
--- a/services/libs/jinux-std/src/vm/vmo/mod.rs
+++ b/services/libs/jinux-std/src/vm/vmo/mod.rs
@@ -2,9 +2,9 @@
 
 use core::ops::Range;
 
-use crate::rights::Rights;
 use align_ext::AlignExt;
 use jinux_frame::vm::{VmAllocOptions, VmFrameVec, VmIo};
+use jinux_rights::Rights;
 
 use crate::prelude::*;
 
diff --git a/services/libs/jinux-std/src/vm/vmo/options.rs b/services/libs/jinux-std/src/vm/vmo/options.rs
index e9d2c1dc1..041f863f1 100644
--- a/services/libs/jinux-std/src/vm/vmo/options.rs
+++ b/services/libs/jinux-std/src/vm/vmo/options.rs
@@ -10,10 +10,10 @@ use typeflags_util::{SetExtend, SetExtendOp};
 
 use crate::prelude::*;
 
-use crate::rights::{Dup, Rights, TRights, Write};
 use crate::vm::vmo::InheritedPages;
 use crate::vm::vmo::VmoType;
 use crate::vm::vmo::{VmoInner, Vmo_};
+use jinux_rights::{Dup, Rights, TRightSet, TRights, Write};
 
 use super::VmoRightsOp;
 use super::{Pager, Vmo, VmoFlags};
@@ -105,14 +105,14 @@ impl VmoOptions<Rights> {
     }
 }
 
-impl<R: TRights> VmoOptions<R> {
+impl<R: TRights> VmoOptions<TRightSet<R>> {
     /// Allocates the VMO according to the specified options.
     ///
     /// # Access rights
     ///
     /// The VMO is initially assigned the access rights represented
     /// by `R: TRights`.
-    pub fn alloc(self) -> Result<Vmo<R>> {
+    pub fn alloc(self) -> Result<Vmo<TRightSet<R>>> {
         let VmoOptions {
             size,
             flags,
@@ -120,7 +120,7 @@ impl<R: TRights> VmoOptions<R> {
             pager,
         } = self;
         let vmo_ = alloc_vmo_(size, flags, pager)?;
-        Ok(Vmo(Arc::new(vmo_), R::new()))
+        Ok(Vmo(Arc::new(vmo_), TRightSet(R::new())))
     }
 }
 
@@ -252,7 +252,7 @@ pub struct VmoChildOptions<R, C> {
     marker: PhantomData<C>,
 }
 
-impl<R: TRights> VmoChildOptions<R, VmoSliceChild> {
+impl<R: TRights> VmoChildOptions<TRightSet<R>, VmoSliceChild> {
     /// Creates a default set of options for creating a slice VMO child.
     ///
     /// A slice child of a VMO, which has direct access to a range of memory
@@ -261,7 +261,7 @@ impl<R: TRights> VmoChildOptions<R, VmoSliceChild> {
     ///
     /// The range of a child must be within that of the parent.
     #[require(R > Dup)]
-    pub fn new_slice(parent: Vmo<R>, range: Range<usize>) -> Self {
+    pub fn new_slice(parent: Vmo<TRightSet<R>>, range: Range<usize>) -> Self {
         Self {
             flags: parent.flags() & Self::PARENT_FLAGS_MASK,
             parent,
@@ -373,13 +373,13 @@ impl VmoChildOptions<Rights, VmoCowChild> {
     }
 }
 
-impl<R: TRights> VmoChildOptions<R, VmoSliceChild> {
+impl<R: TRights> VmoChildOptions<TRightSet<R>, VmoSliceChild> {
     /// Allocates the child VMO.
     ///
     /// # Access rights
     ///
     /// The child VMO is initially assigned all the parent's access rights.
-    pub fn alloc(self) -> Result<Vmo<R>> {
+    pub fn alloc(self) -> Result<Vmo<TRightSet<R>>> {
         let VmoChildOptions {
             parent,
             range,
@@ -392,14 +392,14 @@ impl<R: TRights> VmoChildOptions<R, VmoSliceChild> {
     }
 }
 
-impl<R: TRights> VmoChildOptions<R, VmoCowChild> {
+impl<R: TRights> VmoChildOptions<TRightSet<R>, VmoCowChild> {
     /// Allocates the child VMO.
     ///
     /// # Access rights
     ///
     /// The child VMO is initially assigned all the parent's access rights
     /// plus the Write right.
-    pub fn alloc(self) -> Result<Vmo<SetExtendOp<R, Write>>>
+    pub fn alloc(self) -> Result<Vmo<TRightSet<SetExtendOp<R, Write>>>>
     where
         R: SetExtend<Write>,
         SetExtendOp<R, Write>: TRights,
@@ -413,7 +413,7 @@ impl<R: TRights> VmoChildOptions<R, VmoCowChild> {
         let Vmo(parent_vmo_, _) = parent;
         let child_vmo_ = alloc_child_vmo_(parent_vmo_, range, flags, ChildType::Cow)?;
         let right = SetExtendOp::<R, Write>::new();
-        Ok(Vmo(Arc::new(child_vmo_), right))
+        Ok(Vmo(Arc::new(child_vmo_), TRightSet(right)))
     }
 }
 
@@ -501,8 +501,8 @@ impl VmoChildType for VmoCowChild {}
 #[cfg(test)]
 mod test {
     use super::*;
-    use crate::rights::Full;
     use jinux_frame::vm::VmIo;
+    use jinux_rights::Full;
 
     #[test]
     fn alloc_vmo() {
diff --git a/services/libs/jinux-std/src/vm/vmo/static_cap.rs b/services/libs/jinux-std/src/vm/vmo/static_cap.rs
index 49b86a6ac..40b5fe52e 100644
--- a/services/libs/jinux-std/src/vm/vmo/static_cap.rs
+++ b/services/libs/jinux-std/src/vm/vmo/static_cap.rs
@@ -3,7 +3,7 @@ use core::ops::Range;
 use jinux_frame::vm::VmIo;
 use jinux_rights_proc::require;
 
-use crate::rights::*;
+use jinux_rights::{Dup, Rights, TRightSet, TRights, Write};
 
 use super::VmoRightsOp;
 use super::{
@@ -11,7 +11,7 @@ use super::{
     Vmo, VmoChildOptions,
 };
 
-impl<R: TRights> Vmo<R> {
+impl<R: TRights> Vmo<TRightSet<R>> {
     /// Creates a new slice VMO through a set of VMO child options.
     ///
     /// # Example
@@ -35,7 +35,7 @@ impl<R: TRights> Vmo<R> {
     pub fn new_slice_child(
         &self,
         range: Range<usize>,
-    ) -> Result<VmoChildOptions<R, VmoSliceChild>> {
+    ) -> Result<VmoChildOptions<TRightSet<R>, VmoSliceChild>> {
         let dup_self = self.dup()?;
         Ok(VmoChildOptions::new_slice(dup_self, range))
     }
@@ -61,7 +61,10 @@ impl<R: TRights> Vmo<R> {
     /// The child will be given the access rights of the parent
     /// plus the Write right.
     #[require(R > Dup)]
-    pub fn new_cow_child(&self, range: Range<usize>) -> Result<VmoChildOptions<R, VmoCowChild>> {
+    pub fn new_cow_child(
+        &self,
+        range: Range<usize>,
+    ) -> Result<VmoChildOptions<TRightSet<R>, VmoCowChild>> {
         let dup_self = self.dup()?;
         Ok(VmoChildOptions::new_cow(dup_self, range))
     }
@@ -141,7 +144,7 @@ impl<R: TRights> Vmo<R> {
     }
 }
 
-impl<R: TRights> VmIo for Vmo<R> {
+impl<R: TRights> VmIo for Vmo<TRightSet<R>> {
     fn read_bytes(&self, offset: usize, buf: &mut [u8]) -> jinux_frame::Result<()> {
         self.check_rights(Rights::READ)?;
         self.0.read_bytes(offset, buf)?;
@@ -155,7 +158,7 @@ impl<R: TRights> VmIo for Vmo<R> {
     }
 }
 
-impl<R: TRights> VmoRightsOp for Vmo<R> {
+impl<R: TRights> VmoRightsOp for Vmo<TRightSet<R>> {
     fn rights(&self) -> Rights {
         Rights::from_bits(R::BITS).unwrap()
     }