[GSoC] Capsicum application adaptation and core libraries
webmaster at kibab.com
Thu Apr 7 09:13:26 UTC 2011
some time ago I've read a paper about Capsicum (it was published at Google
reseach papers page). I think that this is an interesting technology, and
adopting it for use in FreeBSD base system is worth an effort. Also I see
this idea as GSoC suggested idea on Ideas page .
So I'd like to take this as a possible GSoC project for this summer. As
the task description seems to be very broad, I'd like to be more specific
about what is to be done during the summer.
As core Capsicum libraries will appear in FreeBSD 9 anyway, I think it's
possible to take several applications from the base system and modify them
to use Capsicum sandboxes. For example, the FreeBSD syslog daemon might be
an interesting application to adapt to compartmentalisation model. Exact
list of applications that will be adapted is to be discussed. Primary
focus should be, however on "sbin" and "usr.sbin" world parts.
Do you think that this work may be useful?
More information about the freebsd-hackers