From owner-freebsd-hackers@FreeBSD.ORG Wed Aug 10 21:22:55 2011 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 4B437106564A for ; Wed, 10 Aug 2011 21:22:55 +0000 (UTC) (envelope-from rwatson@FreeBSD.org) Received: from cyrus.watson.org (cyrus.watson.org [65.122.17.42]) by mx1.freebsd.org (Postfix) with ESMTP id 276558FC15 for ; Wed, 10 Aug 2011 21:22:55 +0000 (UTC) Received: from fledge.watson.org (fledge.watson.org [65.122.17.41]) by cyrus.watson.org (Postfix) with ESMTPS id B070046B2E; Wed, 10 Aug 2011 17:22:54 -0400 (EDT) Date: Wed, 10 Aug 2011 22:22:54 +0100 (BST) From: Robert Watson X-X-Sender: robert@fledge.watson.org To: Lars Engels In-Reply-To: <769b9c9ca386e2a2b43c27a8fb5e1ff7@mail.0x20.net> Message-ID: References: <4E167C94.70300@kibab.com> <4E1685D8.403@gmail.com> <2c9d3cc8a0b85313f55f53ca573af81a.squirrel@zugang.kibab.com> <769b9c9ca386e2a2b43c27a8fb5e1ff7@mail.0x20.net> User-Agent: Alpine 2.00 (BSF 1167 2008-08-23) MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-hackers@freebsd.org Subject: Re: Capsicum project: Ideas needed X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Aug 2011 21:22:55 -0000 On Thu, 4 Aug 2011, Lars Engels wrote: > I just stumbled upon this rather outdated thread... > > On Fri, 8 Jul 2011 15:09:52 +0400, Ilya Bakulin wrote: [...] >>> wget curl links/lynx >> This is Ports software, we may try to modify it and even send patches to >> upstream, or maintain our local patches. I wanted to focus on base system >> components during GSoC, but it doesn't hurt to try to capsicumize these >> tools either. > > fetch(1) is similar to wget and curl and is part of the base system, so > would this be a candidate? I'd think fetch would be quite a good candidate -- most of its work is done as a pipeline between a socket and a file, and sandboxing the gubbins that sits in the middle of that pipeline would be quite beneficial. Robert