Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 May 2002 04:58:18 +0200
From:      Bjoern Fischer <bfischer@Techfak.Uni-Bielefeld.DE>
To:        freebsd-hackers@FreeBSD.ORG
Subject:   sandboxing untrusted binaries
Message-ID:  <20020530025817.GA4390@no-support.loc>

next in thread | raw e-mail | index | archive | help
Hello,

OpenBSD has a new interesting feature: systrace. It is a system call
policy generator for "sandboxing" untrusted or semi-trusted binaries.

The whole idea looks interesting. The implementation details look
relatively simple (read: not too complicated). Anyone interested in
having a closer look and maybe porting it?

Or I will try to port it myself if at least one core member says:
"Interesting technology, send a patch..."

http://www.citi.umich.edu/u/provos/systrace/

Bj=F6rn Fischer


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020530025817.GA4390>