[mpm-itk] Improving security under FreeBSD

Ben RUBSON ben.rubson at gmail.com
Wed Dec 9 15:33:12 CET 2015


Hello,

Regarding security, setuid() and setgid() calls can be restricted thanks to LimitUIDRange and LimitGIDRange options.
This only works with Linux, as it requires seccomp v2.

Coud we think about improving security under FreeBSD ?
Perhaps Capsicum framework could help ?

Thank you very much !

Best regards,

Ben




More information about the mpm-itk mailing list