tag

#capsicum

2 posts

FreeBSDDeep Dive July 11, 2026 5 min read

Capsicum Beyond the Basics: Building Capability-Mode Services From Scratch

A deeper look at FreeBSD's Capsicum framework — cap_rights, the process descriptor model, and how to structure a service around capability mode instead of bolting it on afterward.

#capsicum#security#sandboxing

FreeBSDHow-To July 11, 2026 2 min read

How to Harden Services on FreeBSD with Capsicum

A practical walkthrough of Capsicum's capability mode — how to check if a program supports it, and how sandboxed services actually differ from ordinary ones at the syscall level.

#howto#capsicum#security