One other URL that might help understanding the "big picture" behind Capsicum is, and how it differs from most other sandboxing mechanisms, is this: https://en.

One other URL that might help understanding the "big picture" behind Capsicum is, and how it differs from most other sandboxing mechanisms, is this: https://en.wikipedia.org/wiki/Capability-based_security https://en.wikipedia.org/wiki/Capability-based_security. (It's not _that_ good, though; someone(tm) should eventually write an article explaining Capsicum from that point of view, since it's a pretty fundamental difference.)