From owner-freebsd-hackers@FreeBSD.ORG Fri Jul 8 16:10:39 2011 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 85A3D106566B for ; Fri, 8 Jul 2011 16:10:39 +0000 (UTC) (envelope-from giffunip@tutopia.com) Received: from nm30.bullet.mail.sp2.yahoo.com (nm30.bullet.mail.sp2.yahoo.com [98.139.91.100]) by mx1.freebsd.org (Postfix) with SMTP id 610CE8FC12 for ; Fri, 8 Jul 2011 16:10:39 +0000 (UTC) Received: from [98.139.91.69] by nm30.bullet.mail.sp2.yahoo.com with NNFMP; 08 Jul 2011 15:57:22 -0000 Received: from [98.139.91.27] by tm9.bullet.mail.sp2.yahoo.com with NNFMP; 08 Jul 2011 15:57:22 -0000 Received: from [127.0.0.1] by omp1027.mail.sp2.yahoo.com with NNFMP; 08 Jul 2011 15:57:22 -0000 X-Yahoo-Newman-Property: ymail-3 X-Yahoo-Newman-Id: 892195.35860.bm@omp1027.mail.sp2.yahoo.com Received: (qmail 38500 invoked by uid 60001); 8 Jul 2011 15:57:22 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1310140642; bh=lfF/LR+wQh1GmSOQNu4SmY5JluagA9aiAW4WjOjyNIQ=; h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:Cc:MIME-Version:Content-Type; b=5HV8LBEdf5hpvt5DXQ6SFAOVcCn89MDzqgNARYogyBtd/lyb4HKk8/RQ9oOAprCQ+d3NntN8UL2Sr3y5JEJQUJi628HDGNGJOSzJ04wET2YNI0bpt2gPZx4J72T9yPgQ+gpgpnlDulu4XtpScARxQwmqKACEgBQnzoElovevamI= X-YMail-OSG: jRMH8yIVM1l5UJEsJTqt0ABBUBwY_47xApmiUQSzqKRe8Ww m4wcbLH3MA3gZcAl4rdQFXJtKTi8_4Y5wMdS4lUW8wO2ANuPZkWhRLb6F0eT 3PpdpTwVucLvTh7vuA2zg0rrzs_IHNsnE8VgxNQDGl3UQ_307IpDPZXbpu29 5xSx.5_A.JRp1pO14okswaIzKuUaKN0H5kf6_D8ByCJtrldi_DNaVy84wM31 MvEJZw2vBrYdGJfqwF8HfOsLad2RjKm8TBDk5GabI7eNDcG7roIWh2vddyuB Q_0d_dGb.cBUAt6ZpFl_H_IxoSsMjLja1ivL3.2aN8X9OnCQiF52p1g2ZcLe 6I6q96FtAYUs9dGBfuWvjDH3i_EJc7IOn48AgK6Lk0xazeerEcWOpR5r0OnT 2yvrwwuX1JkQBOqE- Received: from [190.157.142.22] by web113508.mail.gq1.yahoo.com via HTTP; Fri, 08 Jul 2011 08:57:22 PDT X-RocketYMMF: giffunip X-Mailer: YahooMailClassic/14.0.3 YahooMailWebService/0.8.112.307740 Message-ID: <1310140642.21018.YahooMailClassic@web113508.mail.gq1.yahoo.com> Date: Fri, 8 Jul 2011 08:57:22 -0700 (PDT) From: "Pedro F. Giffuni" To: Ilya Bakulin MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailman-Approved-At: Fri, 08 Jul 2011 16:42:42 +0000 Cc: freebsd-hackers@freebsd.org, "Robert N. M. Watson" , Jonathan Anderson Subject: Re: Capsicum project: Ideas needed X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: giffunip@tutopia.com List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Jul 2011 16:10:39 -0000 FWIW; I would think ftpd, which may require an update too, would be a classical candidate. Perhaps also telnetd. I recall sendmail calls bin/sh for some things and there is an option for a restricted shell (rsh), so supporting a shell would help sendmail too. And then some stuff like ipfw is never too security aware. However for those of us not capsicum-aware it's difficult to say if using jails would be better or more practical. cheers, Pedro.