Capability-Based Security for Redox: Namespace and CWD as Capabilities

5 comments

• als0 7 hours ago

  Good work. I'm happy to see this for Redox. There are numerous implementations of capabilities now, and they confirm that the concept really does simplify access control and sandboxing.

  [-]
  • ambicapter 4 hours ago

    Could I get some examples? I'm interested in learning more.

    [-]
    • wmf 2 hours ago

      https://www.cl.cam.ac.uk/research/security/capsicum/

    • davexunit 4 hours ago

      http://habitatchronicles.com/2017/05/what-are-capabilities/

      https://files.spritely.institute/papers/spritely-core.html

    • Icathian an hour ago

      Cloudflare's developer platform uses them. That's what their "bindings" are.