headers
lists | 13 Aug 2010 01:45
Picon

Capsicum: practical capabilities for UNIX

http://www.lightbluetouchpaper.org/2010/08/12/capsicum-practical-capabilities-for-unix/

Capsicum: practical capabilities for UNIX

August 12th, 2010 at 02:57 UTC by Robert N. M. Watson

Today, Jonathan Anderson, Ben Laurie, Kris Kennaway, and I
presented Capsicum: practical capabilities for UNIX at the 19th
USENIX Security Symposium in Washington, DC; the slides can
be found on the Capsicum web site. We argue that capability
design principles fill a gap ....

http://www.cl.cam.ac.uk/research/security/capsicum/
Permalink | Reply | 4 comments |
headers
John Carlson | 13 Aug 2010 02:59
Picon
Favicon

Re: Capsicum: practical capabilities for UNIX

What kind of capabilities do you have for the desktop?  What kinds of permissions are available for the
desktop?  Who can open, read, change, close a window?  Can I pass desktop privileges to other desktops?

John
On Aug 12, 2010, at 4:45 PM, lists@... wrote:

> http://www.lightbluetouchpaper.org/2010/08/12/capsicum-practical-capabilities-for-unix/
> 
> Capsicum: practical capabilities for UNIX
> 
> August 12th, 2010 at 02:57 UTC by Robert N. M. Watson
> 
> Today, Jonathan Anderson, Ben Laurie, Kris Kennaway, and I
> presented Capsicum: practical capabilities for UNIX at the 19th
> USENIX Security Symposium in Washington, DC; the slides can
> be found on the Capsicum web site. We argue that capability
> design principles fill a gap ....
> 
> http://www.cl.cam.ac.uk/research/security/capsicum/
> _______________________________________________
> cap-talk mailing list
> cap-talk@...
> http://www.eros-os.org/mailman/listinfo/cap-talk
Permalink | Reply | 3 comments |
headers
John Carlson | 13 Aug 2010 03:05
Picon
Favicon

Re: Capsicum: practical capabilities for UNIX

Ah, now I see the chromium thing.  Interesting...

John
On Aug 12, 2010, at 5:59 PM, John Carlson wrote:

> What kind of capabilities do you have for the desktop?  What kinds of permissions are available for the
desktop?  Who can open, read, change, close a window?  Can I pass desktop privileges to other desktops?
> 
> 
> John
> On Aug 12, 2010, at 4:45 PM, lists@... wrote:
> 
>> http://www.lightbluetouchpaper.org/2010/08/12/capsicum-practical-capabilities-for-unix/
>> 
>> Capsicum: practical capabilities for UNIX
>> 
>> August 12th, 2010 at 02:57 UTC by Robert N. M. Watson
>> 
>> Today, Jonathan Anderson, Ben Laurie, Kris Kennaway, and I
>> presented Capsicum: practical capabilities for UNIX at the 19th
>> USENIX Security Symposium in Washington, DC; the slides can
>> be found on the Capsicum web site. We argue that capability
>> design principles fill a gap ....
>> 
>> http://www.cl.cam.ac.uk/research/security/capsicum/
>> _______________________________________________
>> cap-talk mailing list
>> cap-talk@...
>> http://www.eros-os.org/mailman/listinfo/cap-talk
>
(Continue reading)

Permalink | Reply | 0 comments |
headers
lists | 13 Aug 2010 14:08
Picon

Re: Capsicum: practical capabilities for UNIX

John Carlson writes:

> What kind of capabilities do you have for the desktop? ...

Are you addressing Ben?  He's one of the perpetrators of this scheme.
Permalink | Reply | 1 comment |
headers
Mike Samuel | 16 Aug 2010 20:14
Picon
Gravatar

OWASPs talk on ocaps

Jasvir and I gave a talk at an OWASP conference in June on how ocaps
and virtualization can be used in tandem to bolt new security policies
onto systems with hard legacy constraints.

The video and slides are now up at http://owasp.blip.tv/file/3917705/

Also of interest might be Sergio Maffei's talk "#(New) Object
Capabilities and Isolation of Untrusted Web Applications."
(video: http://owasp.blip.tv/file/3918179/ , slides:
http://www.owasp.org/images/0/0c/OWASP_AppSec_Research_2010_Obj_Capabilities_by_Maffeis.pdf
)

cheers,
mike
Permalink | Reply | 0 comments |

Gmane