News for hackers. Stuff that matters.
Re:Introducing Capsicum: Practical Capabilities for UNIX by azm on Monday December 27, 2010 @10:30PM (#2044519)
If you don't want a PDF or scribd, clicky to Cambridge project page: http://www.cl.cam.ac.uk/research/security/capsicum/
[ Parent | on HN ]
Re:Introducing Capsicum: Practical Capabilities for UNIX by cannedprimates on Tuesday December 28, 2010 @02:20AM (#2044909)
In particular, the Usenix talk about Capsicum has been recorded: http://www.youtube.com/watch?v=raNx9L4VH2k
[ Parent | on HN ]
Re:Introducing Capsicum: Practical Capabilities for UNIX by sophacles on Monday December 27, 2010 @10:18PM (#2044490)
Somewhat related -- I have always thought it would be cool to build a capability system like this into a language with a strong H-M type system. I think it would be an interesting study to have the bare minimum privileges passed via type dependences. Done well this would have any given bit of code only have the bare minimum to do its job.

Also: some types of automatic security checks at compile time too!

[ Parent | on HN ]
Re:Introducing Capsicum: Practical Capabilities for UNIX by cannedprimates on Tuesday December 28, 2010 @02:23AM (#2044915)
Have you seen http://lambda-the-ultimate.org/node/1635 (Lightweight static capabilities)? Author's page: http://okmij.org/ftp/Computation/lightweight-dependent-typin...
[ Parent | on HN ]
Re:Introducing Capsicum: Practical Capabilities for UNIX by sophacles on Tuesday December 28, 2010 @09:57AM (#2045600)
I had not seen that, thanks for the pointer!
[ Parent | on HN ]
Re:Introducing Capsicum: Practical Capabilities for UNIX by btilly on Monday December 27, 2010 @09:40PM (#2044403)
A note for those who thought that Unix has had capabilities forever. POSIX defines something called capabilities that are very, very different from a true capability system. This is a true capability system.
[ Parent | on HN ]