From owner-p4-projects@FreeBSD.ORG  Wed Jun  2 14:55:07 2010
Return-Path: <owner-p4-projects@FreeBSD.ORG>
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id 152E81065675; Wed,  2 Jun 2010 14:55:07 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id B903D1065673
	for <perforce@freebsd.org>; Wed,  2 Jun 2010 14:55:06 +0000 (UTC)
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: from repoman.freebsd.org (unknown [IPv6:2001:4f8:fff6::29])
	by mx1.freebsd.org (Postfix) with ESMTP id A53918FC0C
	for <perforce@freebsd.org>; Wed,  2 Jun 2010 14:55:06 +0000 (UTC)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
	by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id o52Et6km088273
	for <perforce@freebsd.org>; Wed, 2 Jun 2010 14:55:06 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Received: (from perforce@localhost)
	by repoman.freebsd.org (8.14.3/8.14.3/Submit) id o52Et6iF088271
	for perforce@freebsd.org; Wed, 2 Jun 2010 14:55:06 GMT
	(envelope-from bb+lists.freebsd.perforce@cyrus.watson.org)
Date: Wed, 2 Jun 2010 14:55:06 GMT
Message-Id: <201006021455.o52Et6iF088271@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
	bb+lists.freebsd.perforce@cyrus.watson.org using -f
From: Robert Watson <rwatson@FreeBSD.org>
To: Perforce Change Reviews <perforce@freebsd.org>
Precedence: bulk
Cc: 
Subject: PERFORCE change 179094 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
List-Id: p4 projects tree changes <p4-projects.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/p4-projects>
List-Post: <mailto:p4-projects@freebsd.org>
List-Help: <mailto:p4-projects-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/p4-projects>,
	<mailto:p4-projects-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 02 Jun 2010 14:55:07 -0000

http://p4web.freebsd.org/@@179094?ac=10

Change 179094 by rwatson@rwatson_fledge on 2010/06/02 14:54:54

	Add Capsicum paper to the TrustedBSD web site as well as the main
	Computer Laboratory Capsicum site.

Affected files ...

.. //depot/projects/trustedbsd/www/2010usenix-security-capsicum-website.pdf#1 add
.. //depot/projects/trustedbsd/www/Makefile#17 edit
.. //depot/projects/trustedbsd/www/docs.bib#6 edit

Differences ...

==== //depot/projects/trustedbsd/www/Makefile#17 (text+ko) ====

@@ -28,7 +28,7 @@
 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 # SUCH DAMAGE.
 # 
-# $P4: //depot/projects/trustedbsd/www/Makefile#16 $
+# $P4: //depot/projects/trustedbsd/www/Makefile#17 $
 
 STYLESHEET=	page.xsl
 
@@ -85,6 +85,7 @@
 DATA+=		20000809-trustedbsd-announcement.txt
 DATA+=		robots.txt
 DATA+=		20060303-ukuug2006lisa-audit.pdf
+DATA+=		2010usenix-security-capsicum-website.pdf
 
 GLOBAL_XML=	sidebar.xml
 

==== //depot/projects/trustedbsd/www/docs.bib#6 (text+ko) ====

@@ -35,7 +35,7 @@
 
   <cvs:keywords xmlns:cvs="http://www.FreeBSD.org/XML/CVS" version="1.0">
     <cvs:keyword name="freebsd">
-      $P4: //depot/projects/trustedbsd/www/docs.bib#5 $
+      $P4: //depot/projects/trustedbsd/www/docs.bib#6 $
     </cvs:keyword>
   </cvs:keywords>
 
@@ -370,4 +370,44 @@
 
   </entry>
 
+  <entry role="paper" date="20100811">
+    <title>Capsicum: practical capabilities for UNIX</title>
+
+    <author>
+      <name>Robert N. M. Watson</name>
+      <affil>University of Cambridge</affil>
+    </author>
+
+    <author>
+      <name>Jonathan Anderson</name>
+      <affil>University of Cambridge</affil>
+    </author>
+
+    <author>
+      <name>Ben Laurie</name>
+      <affil>Google UK Ltd.</affil>
+    </author>
+
+    <author>
+      <name>Kris Kennaway</name>
+      <affil>Google UK Ltd.</affil>
+    </author>
+
+    <download>
+      <file url="2010usenix-security-capsicum-website.pdf" format="PDF" />
+    </download>
+
+    <abstract>Capsicum is a lightweight operating system capability and
+      sandbox framework planned for inclusion in FreeBSD 9. Capsicum extends,
+      rather than replaces, UNIX APIs, providing new kernel primitives
+      (sandboxed capability mode and capabilities) and a userspace sandbox
+      API. These tools support compartmentalisation of monolithic UNIX
+      applications into logical applications, an increasingly common goal
+      supported poorly by discretionary and mandatory access control. We
+      demonstrate our approach by adapting core FreeBSD utilities and
+      Google's Chromium web browser to use Capsicum primitives, and compare
+      the complexity and robustness of Capsicum with other sandboxing
+      techniques.</abstract>
+  </entry>
+
 </bibliography>