BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//talks.cam.ac.uk//v3//EN
BEGIN:VTIMEZONE
TZID:Europe/London
BEGIN:DAYLIGHT
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
TZNAME:BST
DTSTART:19700329T010000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
TZNAME:GMT
DTSTART:19701025T020000
RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
CATEGORIES:Computer Laboratory Security Group meeting present
 ations
SUMMARY:Capsicum: Practical capabilities for UNIX - Robert
  Watson (University of Cambridge)
DTSTART;TZID=Europe/London:20100226T160000
DTEND;TZID=Europe/London:20100226T163000
UID:TALK23313AThttp://talks.cam.ac.uk
URL:http://talks.cam.ac.uk/talk/index/23313
DESCRIPTION:Capsicum is a lightweight operating system capabil
 ity and sandbox  framework planned for inclusion i
 n FreeBSD 9.\n\nCapsicum extends\, rather than rep
 laces\, UNIX APIs\, providing new  kernel primitiv
 es (sandboxed capability mode and capabilities) an
 d a userspace sandbox API. These tools support the
  compartmentalization of monolithic UNIX applicati
 ons into logical applications.\n\nWe demonstrate o
 ur approach by adapting core FreeBSD utilities and
  Google's Chromium web browser to use Capsicum pri
 mitives\, and compare the complexity and robustnes
 s of Capsicum with other sandboxing techniques.
LOCATION:Computer Laboratory\, William Gates Building\, Roo
 m FW11
CONTACT:Jonathan Anderson
END:VEVENT
END:VCALENDAR