4 ms·
Not really. Capsicum provides an actual security architecture (capability-based security), as opposed to a ad-hoc bandaid mechanism.
by trasz 6y ago
Not really. Capsicum provides an actual security architecture (capability-based security), as opposed to a ad-hoc bandaid mechanism.
- Ericson2314 6y agoYeah to be clear I would rather see a proper implementation. From the LWN thread I thought Linux didn't have a personality system so this might be a stop-gap way to make a lighter weight implementation, but somebody commented that it in fact does (if barely), so that should be used instead.