google/capsicum-linux
View on GitHub ↗ ★ 211 C archived
Linux kernel with Capsicum support
5 mentions on Hacker News by 5 people: 1 story, 4 comments · first 2013-10-08 · latest 2022-07-15
20082026
-
Unfortunately the Linux port was never incorporated and is apparently now abandoned: https://github.com/google/capsicum-linux Then, if you're serious about capabilities, as you should be more-or-less, you might want Genode (posted here…
comment by gnufx · 2022-07-15 · in Show HN: Porting OpenBSD Pledge() to Linux -
The kernel patchset I was referring to is https://github.com/google/capsicum-linux - it's a Linux version of Capsicum. Though now that I look at it more closely, it appears to no longer be maintained. :( That said, the Bytecode Alliance…
comment by ryukafalz · 2019-12-05 · in Two malicious Python libraries caught stealing SSH and GPG keys -
https://github.com/google/capsicum-linux would basically render this entire class of bug impossible if used correctly. It would probably require a redesign of how docker interacts with the host filesystem though, and obviously relies on…
comment by anaphor · 2019-05-28 · in Docker is vulnerable to a symlink-race attack -
…implemented for Linux and has been for a couple years, it's just not in Linus's tree[1]. [1]: https://github.com/google/capsicum-linux
comment by 2trill2spill · 2017-11-21 · in Application Container Security Guide [pdf]