Date: Thu, 7 Apr 2011 13:13:24 +0400 From: "Ilya Bakulin" <webmaster@kibab.com> To: freebsd-hackers@freebsd.org Cc: rwatson@freebsd.org Subject: [GSoC] Capsicum application adaptation and core libraries Message-ID: <8f579ecd416ebcd14db4dad6631df74c.squirrel@zugang.kibab.com>
next in thread | raw e-mail | index | archive | help
Hi all, some time ago I've read a paper about Capsicum (it was published at Google reseach papers page). I think that this is an interesting technology, and adopting it for use in FreeBSD base system is worth an effort. Also I see this idea as GSoC suggested idea on Ideas page [1]. So I'd like to take this as a possible GSoC project for this summer. As the task description seems to be very broad, I'd like to be more specific about what is to be done during the summer. As core Capsicum libraries will appear in FreeBSD 9 anyway, I think it's possible to take several applications from the base system and modify them to use Capsicum sandboxes. For example, the FreeBSD syslog daemon might be an interesting application to adapt to compartmentalisation model. Exact list of applications that will be adapted is to be discussed. Primary focus should be, however on "sbin" and "usr.sbin" world parts. Do you think that this work may be useful? [1] http://wiki.freebsd.org/IdeasPage#head-18b374cddb7998946780392a7f7a38848e7be27c -- Regards, Ilya Bakulin http://kibab.com xmpp://kibab612@jabber.ru
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8f579ecd416ebcd14db4dad6631df74c.squirrel>