Re: Capsicum for Linux?

Agree with Mark -- I am a huge fan here.

I also wonder whether if by porting Capsicum to e.g. Android, and
integrating it with the graphical shell (along the lines of
"User-Driven Access Control") and associated "app store", one might
have some real impact in the long run. Google surely has in incentive
to adopt the most POLA-friendly experience for Android that they can,
to reduce the possibility of harmful (as opposed to confined-by-POLA)
malware being present on Android phones/tablets/TVs etc.

On 9 January 2014 09:30, Mark S. Miller <[email protected]> wrote:
> [+benl, +robert.watson]
>
> On Wed, Jan 8, 2014 at 1:04 PM, Nigel Williams <[email protected]>
> wrote:
>>
>> Via the popular news channels, Google has sponsored a port of Capsicum
>> to Linux, details here:
>>
>> https://github.com/google/capsicum-Linux
>>
>>
>> http://www.lightbluetouchpaper.org/2013/12/20/2013-capsicum-year-in-review/
>> http://www.cl.cam.ac.uk/research/security/capsicum/linux.html
>>
>> https://lists.cam.ac.uk/pipermail/cl-capsicum-discuss/2013-October/msg00004.html
>>
>> What do cap-talkers think of capsicum generally? lipstick-on-a-pig or
>> butterfly from a chrysalis?
>
>
> My view: Important progress towards real-world-deployable ocaps. The legacy
> pressure problem has always been our worst, and this is one of the most
> promising angles at overcoming it. As an ocap system, it has some
> weaknesses, but all of these seem repairable. I'm a fan.
>
>
>>
>> _______________________________________________
>> cap-talk mailing list
>> [email protected]
>> http://www.eros-os.org/mailman/listinfo/cap-talk
>
>
>
>
> --
>     Cheers,
>     --MarkM
>
> _______________________________________________
> cap-talk mailing list
> [email protected]
> http://www.eros-os.org/mailman/listinfo/cap-talk
>