tag
5 posts
A precise guide to Linux seccomp-BPF actions, filter layering, argument limits, no_new_privs, observability, and the controls a real sandbox still needs.
How to design a FreeBSD service around Capsicum descriptor rights, capability mode, process descriptors, and delegated Casper services.
How to adapt a FreeBSD program for Capsicum by pre-opening resources, limiting descriptor rights, entering capability mode, and testing denial.
The IPC framework behind most of macOS's privilege separation, built on Mach IPC but designed to make secure, sandboxed communication the easy default.
How the App Sandbox confines what an application can access by default, and how entitlements grant it specific, narrow exceptions.