From owner-freebsd-arch@FreeBSD.ORG  Sun Jan 23 03:28:27 2011
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
Delivered-To: freebsd-arch@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 74D59106566C
	for <freebsd-arch@freebsd.org>; Sun, 23 Jan 2011 03:28:27 +0000 (UTC)
	(envelope-from freebsd-arch@m.gmane.org)
Received: from lo.gmane.org (lo.gmane.org [80.91.229.12])
	by mx1.freebsd.org (Postfix) with ESMTP id 2D1E18FC12
	for <freebsd-arch@freebsd.org>; Sun, 23 Jan 2011 03:28:26 +0000 (UTC)
Received: from list by lo.gmane.org with local (Exim 4.69)
	(envelope-from <freebsd-arch@m.gmane.org>) id 1PgqOK-0002N7-8G
	for freebsd-arch@freebsd.org; Sun, 23 Jan 2011 04:13:24 +0100
Received: from 89-164-107-17.dsl.iskon.hr ([89.164.107.17])
	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
	id 1AlnuQ-0007hv-00
	for <freebsd-arch@freebsd.org>; Sun, 23 Jan 2011 04:13:24 +0100
Received: from ivoras by 89-164-107-17.dsl.iskon.hr with local (Gmexim 0.1
	(Debian)) id 1AlnuQ-0007hv-00
	for <freebsd-arch@freebsd.org>; Sun, 23 Jan 2011 04:13:24 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: freebsd-arch@freebsd.org
From: Ivan Voras <ivoras@freebsd.org>
Date: Sun, 23 Jan 2011 04:12:51 +0100
Lines: 26
Message-ID: <ihg6c2$hv2$1@dough.gmane.org>
References: <alpine.BSF.2.00.1101221506260.83042@fledge.watson.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@dough.gmane.org
X-Gmane-NNTP-Posting-Host: 89-164-107-17.dsl.iskon.hr
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.9.2.13) Gecko/20101207 Lightning/1.0b2 Thunderbird/3.1.7
In-Reply-To: <alpine.BSF.2.00.1101221506260.83042@fledge.watson.org>
Subject: Re: Capsicum -- 9.x merge in sight
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussion related to FreeBSD architecture <freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 23 Jan 2011 03:28:27 -0000

On 22.1.2011 16:25, Robert Watson wrote:
>
> Dear all:
>
> As many of you will now have heard, the Computer Laboratory at the
> University of Cambridge and Google have been collaborating for the last
> few years on a security research project called Capsicum. It consists of
> a set of extensions to the POSIX API adding a new "capability mode",
> "capabilities", "process descriptors", and several other additions
> required to implement a capability-oriented sandbox model in UNIX. These

Hello,

How is Capsicum positioned, from user & admin perspective, when compared 
to the MAC work on FreeBSD and SELinux on Linux? Is one the superset of 
another, will one obsolete another?

 > The current plan is *not* to merge
 > libcapsicum, a userspace library used by certain applications to
 > construct sandboxes, as we feel the API remains insufficiently mature at
 > this point.

I vaguely remember that the MAC work has never gotten as popular on 
FreeBSD as SELinux on Linux because it lacked user-oriented tools and 
documentation - is there a danger Capsicum will end up the same?