diff --git a/doc/sandbox/README.md b/doc/sandbox/README.md index 7ff9f45b3e..2e14d84429 100644 --- a/doc/sandbox/README.md +++ b/doc/sandbox/README.md @@ -19,8 +19,8 @@ the rules are described in a lispy .sb file: **NOTE**: r2 -S is an alias for -e cfg.sandbox=true -OpenBSD (starting to 5.9) -------------------------- +OpenBSD (from 5.9) +------------------ OpenBSD comes with support for sandboxing using the pledge(2) syscall. @@ -45,6 +45,14 @@ Run with the generated profile $ systrace -a r2 -S /bin/ls +FreeBSD (from 10.0) +------------------- + +FreeBSD comes with the Capsicum framework support, + using cap_enter(2). + +Operations limited on what basic capability mode support. + Other -----