David Chisnall (*Now with 50% more sarcasm!*) on Nostr: #FreeBSD security folks: is the latest jails security advisory also a Capsicum ...
#FreeBSD security folks: is the latest jails security advisory also a Capsicum sandbox escape if your capability-mode program has a descriptor to /dev/fd?
Published at
2026-09-29 20:46:51 UTCEvent JSON
{
"id": "acc5f3db73af5abb7d1a8fa3d8101b2a7a4a7d7cd5e9ede8e25403b10634966c",
"pubkey": "ed98dd172c8fec81e65ac4d2b0687fe3ac855a12e939c028820df32002c896e7",
"created_at": 1790714811,
"kind": 1,
"tags": [
[
"t",
"freebsd"
],
[
"proxy",
"https://infosec.exchange/users/david_chisnall/statuses/117356285897825000",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "#FreeBSD security folks: is the latest jails security advisory also a Capsicum sandbox escape if your capability-mode program has a descriptor to /dev/fd?",
"sig": "943882399e61c51948a880b28987e70551ecf21193dd529afe0f8cf1d98373b18f1be3e78535a6dc70ef2838b3a7b4496538d52f31e906016e17c2673489ece4"
}
