Excuse me for being ignorant, is Seccomp what SELinux is based on ?
Also, what is well-known piece of software that uses Capsicum on FreeBSD ? Can someone name a few ?
Also, what is well-known piece of software that uses Capsicum on FreeBSD ? Can someone name a few ?
They also operate under pretty fundamentally different philosophies. Seccomp is based on a program dropping its own permissions. SELinux is based on a system integrator writing an ahead of time policy restricting what a program can do.