From owner-freebsd-hackers@FreeBSD.ORG Sat Jul 9 22:39:10 2011 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx2.freebsd.org (mx2.freebsd.org [IPv6:2001:4f8:fff6::35]) by hub.freebsd.org (Postfix) with ESMTP id 2EC64106564A for ; Sat, 9 Jul 2011 22:39:10 +0000 (UTC) (envelope-from dougb@FreeBSD.org) Received: from 65-241-43-4.globalsuite.net (hub.freebsd.org [IPv6:2001:4f8:fff6::36]) by mx2.freebsd.org (Postfix) with ESMTP id ACA87150B01 for ; Sat, 9 Jul 2011 22:39:07 +0000 (UTC) Message-ID: <4E18D88B.4060805@FreeBSD.org> Date: Sat, 09 Jul 2011 15:39:07 -0700 From: Doug Barton Organization: http://SupersetSolutions.com/ User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:5.0) Gecko/20110706 Thunderbird/5.0 MIME-Version: 1.0 To: freebsd-hackers@freebsd.org References: <4E167C94.70300@kibab.com> <4E186B89.8080003@FreeBSD.org> In-Reply-To: <4E186B89.8080003@FreeBSD.org> X-Enigmail-Version: 1.2pre OpenPGP: id=1A1ABC84 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: Capsicum project: Ideas needed X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jul 2011 22:39:10 -0000 On 07/09/2011 07:54, Gabor Kovesdan wrote: > Anyway, consider sendmail and BIND. I think these are important enough > to get some more protection. What additional protection could capsicum offer beyond chroot'ing? (That's not a snark, I don't quite understand all the moving parts here.) Doug -- Nothin' ever doesn't change, but nothin' changes much. -- OK Go Breadth of IT experience, and depth of knowledge in the DNS. Yours for the right price. :) http://SupersetSolutions.com/