Capsicum: Capability-Based Sandboxing for UNIX

USENIX · Talk · 35 min · 2010 · YouTube title: Capsicum: Practical Capabilities for UNIX

Why it's here

Referenced as the authoritative talk on Capsicum, including comparisons of how little code it takes to sandbox programs versus SELinux.

What it covers

Robert Watson presents the Capsicum paper at USENIX Security 2010, describing practical capability-based sandboxing for UNIX. The paper won Best Student Paper.