Hacker News new | ask | show | jobs
by ruslan 95 days ago
Excuse me for being ignorant, is Seccomp what SELinux is based on ?

Also, what is well-known piece of software that uses Capsicum on FreeBSD ? Can someone name a few ?

1 comments

No. SELinux is based on the Linux Security Module framework, which places explicit hooks at key points within the kernel.

They also operate under pretty fundamentally different philosophies. Seccomp is based on a program dropping its own permissions. SELinux is based on a system integrator writing an ahead of time policy restricting what a program can do.