Current status? about capsicum-linux HOT 4 CLOSED

I'm afraid there's no work being done on the Linux port at present.

That's an enormous shame. Capsicum would have been a wonderful thing for Linux. What was the reason that the effort died?

from capsicum-linux.

@teran-mckinney There certainly hasn't been much said about it in a very, very long time.

from capsicum-linux.

Ah, that's a shame. Thanks for confirming!

Being able to lock down threads or subprocesses makes so much sense.

from capsicum-linux.

Yeah, I'm afraid there's no work being done on the Linux port at present.

However, there are a couple of recent bits of Linux activity that overlap with some of the ancillary Capsicum features, and so may be of interest:

• pidfds are somewhat analogous to Capsicum's process descriptors.
• There's a proposed patchset that includes functionality similar to path policing in capability mode (which got pulled out as a separate O_BENEATH flag in the Linux Capsicum port)

from capsicum-linux.