Hi all, some time ago I've read a paper about Capsicum (it was published at Google reseach papers page). I think that this is an interesting technology, and adopting it for use in FreeBSD base system is worth an effort. Also I see this idea as GSoC suggested idea on Ideas page [1].
So I'd like to take this as a possible GSoC project for this summer. As the task description seems to be very broad, I'd like to be more specific about what is to be done during the summer. As core Capsicum libraries will appear in FreeBSD 9 anyway, I think it's possible to take several applications from the base system and modify them to use Capsicum sandboxes. For example, the FreeBSD syslog daemon might be an interesting application to adapt to compartmentalisation model. Exact list of applications that will be adapted is to be discussed. Primary focus should be, however on "sbin" and "usr.sbin" world parts. Do you think that this work may be useful? [1] http://wiki.freebsd.org/IdeasPage#head-18b374cddb7998946780392a7f7a38848e7be27c -- Regards, Ilya Bakulin http://kibab.com xmpp://[email protected] _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-hackers To unsubscribe, send any mail to "[email protected]"
