tag

#capsicum

2 posts

FreeBSDDeep Dive July 11, 2026 7 min read

Capsicum Beyond the Basics: Building Capability-Mode Services From Scratch

How to design a FreeBSD service around Capsicum descriptor rights, capability mode, process descriptors, and delegated Casper services.

#capsicum#security#sandboxing

FreeBSDHow-To July 11, 2026 5 min read

How to adapt a FreeBSD program for Capsicum by pre-opening resources, limiting descriptor rights, entering capability mode, and testing denial.

#howto#capsicum#security