Capsicum technologies

Capsicum consists of various technologies:

More information, links

Existing examples to follow

Candidate programs

(should be relatively easy to sandbox using Capsicum)

Multiple file arguments

Some of those are more tricky, as they take multiple files as arguments and we don't want to open all of them at once before entering the sandbox. The best way to support this class of utilities is to provide a casperd service which can help iterate through all the files.

setuid / setgid binaries

Network daemons

Capsicum regression tests

in the source tree:

external:

Capsicum (last edited 2022-11-07T17:12:53+0000 by AlanSomers)