> but I also don't want that cool calculator application I just downloaded have access to the network, my webcam or microphone, my photos, email, or really any

> but I also don't want that cool calculator application I just downloaded have access to the network, my webcam or microphone, my photos, email, or really any files outside of the ones in its directory. I think that the way to do should be capability-based security with proxy capabilities, and that can be controlled directly by end users. (The existing ways (user accounts, existing sandboxing systems, etc) have many problems, in my opinion) However, I think this HelloSystem is based on BSD so it would use POSIX. (EDIT: Now I found apparently FreeBSD has a capability mode too, so maybe it can use capabilities.)