Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 8 Jul 2011 08:57:22 -0700 (PDT)
From:      "Pedro F. Giffuni" <giffunip@tutopia.com>
To:        Ilya Bakulin <webmaster@kibab.com>
Cc:        freebsd-hackers@freebsd.org, "Robert N. M. Watson" <robert.watson@cl.cam.ac.uk>, Jonathan Anderson <jonathan.anderson@cl.cam.ac.uk>
Subject:   Re: Capsicum project: Ideas needed
Message-ID:  <1310140642.21018.YahooMailClassic@web113508.mail.gq1.yahoo.com>

next in thread | raw e-mail | index | archive | help
FWIW;

I would think ftpd, which may require an update too,
would be a classical candidate. Perhaps also telnetd.

I recall sendmail calls bin/sh for some things and there
is an option for a restricted shell (rsh), so supporting
a shell would help sendmail too.

And then some stuff like ipfw is never too security aware.

However for those of us not capsicum-aware it's difficult
to say if using jails would be better or more practical.

cheers,

Pedro.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1310140642.21018.YahooMailClassic>