capabilities and, er, capabilities

Posted Nov 5, 2025 18:16 UTC (Wed) by smcv (subscriber, #53363)
Parent article: A security model for systemd

> how Poettering would replace capabilities if he had a magic wand capable of doing so ... He said that he liked FreeBSD's Capsicum

... so, he'd like to replace the thing that is named "capabilities" (but, confusingly, is not a capability-based security model with the meaning used in e.g. https://en.wikipedia.org/wiki/Capability-based_security) with a capability-based security model. Terminology is hard!