From mboxrd@z Thu Jan 1 00:00:00 1970 From: perry at piermont.com (Perry E. Metzger) Date: Sun, 8 Jul 2018 16:53:17 -0400 Subject: [COFF] Other OSes? In-Reply-To: <20180708163150.0c9e1870@jabberwock.cb.piermont.com> References: <20180705055650.GA2170@minnie.tuhs.org> <20180708163150.0c9e1870@jabberwock.cb.piermont.com> Message-ID: <20180708165317.280ebe34@jabberwock.cb.piermont.com> On Sun, 8 Jul 2018 16:31:50 -0400 "Perry E. Metzger" wrote: > On Wed, 4 Jul 2018 23:40:36 -0700 Bakul Shah > wrote: > > - Capabilities (a number of OSes implemented them -- See Hank > > Levy's book: https://homes.cs.washington.edu/~levy/capabook/ > > A fascinating resurrection of capabilities in a kind of pleasant > Unixy-way can be found in Robert Watson's "Capsicum" add-ons for > FreeBSD and Linux. I wish it was more widely known about and > adopted. Thought I might mention where to find more information on that: Paper: https://www.usenix.org/legacy/event/sec10/tech/full_papers/Watson.pdf Presentation at Usenix Security: https://www.youtube.com/watch?v=raNx9L4VH2k Web page: https://www.cl.cam.ac.uk/research/security/capsicum/documentation.html -- Perry E. Metzger perry at piermont.com