MarketCapsicum (Unix)
Company Profile

Capsicum (Unix)

Capsicum is an implementation of capability-based security for UNIX and similar systems. Presented at USENIX Security Symposium 2010, the system is part of FreeBSD since its 9.0 release. It has also been adapted to DragonflyBSD in the form of kernel patches. Further technical details can be found in the Ph.D. thesis by Robert Watson.

CloudABI
CloudABI is an application binary interface based on capsicum. It keeps the overall capsicum permission model, but uses it to redesign a simplified environment for processes (system calls, C library, etc.) to run on, so that programs become portable to any platform supporting the ABI on the same instruction set architecture. The interface it offers is roughly POSIX minus parts that do not work with capability-based security. , CloudABI is natively a part of FreeBSD, and it can be run on other systems either via a Capsicum-based patch or using a non-secure system call emulator. As of October 2020, CloudABI has been deprecated in favor of WebAssembly System Interface for lack of interest. == References ==
tickerdossier.comtickerdossier.substack.com