[maemo-developers] Plash:tools for practical least privilege

[From: Neal H. Walfield]

At Wed, 14 Mar 2007 07:35:24 +0100,
"Kees Jongenburger" <kees.jongenburger at gmail.com> wrote:
> 
> Hello
> 
> We have talked about security before when talking about repositories
> and such. J2me and Applets use a sandbox model that I happen to like.
> I came across this product http://plash.beasts.org/ . I wonder if
> people have experimented
> with this or have ideas about sandboxes. I am searching for AppArmour
> kind of applications that would be lightweight enough to run on
> embedded devices.

Check out OLPC's security framework, Bitfrost [1].  It is also based
on POLA principles.

[1] http://dev.laptop.org/git.do?p=security;a=blob;hb=HEAD;f=bitfrost.txt