16 ms·

Wouldn't capsicum then allow to effectively implement different user models than root/user? Where the login process would be responsible to just drop capabiliti

• justincormack 11y ago
  Potentially, although it might need quite a lot of infrastructure to make that work usefully I think, as most of the design in Capsicum has been around reducing capabilities for a single group of programs for security, not a whole system. You can do much of that with Linux capabilities now - see man (7) capabilities and the section "The securebits flags: establishing a capabilities-only environment" which says how to disable suid so root is effectively removed.