Recently, I noticed that the bandwidth of my internet connection had dropped dramatically from 20Mb/s to 1Mb/s and when something is downloaded like OS distro image, a streamed video completely freezes because no bandwidth left.

My router has CPU: Intel(R) Atom(TM) CPU D2550 @ 1.86GHz (1862.04-M...

Continue reading...

FreeBSD Capsicum article

I will start with a digression from the topic of the article.

Modern OSes provides different mechanisms to isolate userland applications from each other. This is important because the CPU provides only limited protections which mostly protects from the basic improper access. The recent vulnerabi...

Continue reading...

Introduction

In the FreeBSD 10.0 to the kernel there was introduced a new technology called 'Capsicum' by Robert Watson and Jonathan Anderson which is based on a "hybrid capability and UNIX access control mode" approach. This is quite fast and reliable software used to apply additional const...

Continue reading...

relkom/small-regex

For the project Sandbox for FreeBSD there was required a regex core to match patterns against the input parameter. The library kokke/tiny-regex-c which was found on the GitHub seemed to be suitable, but after some testats it was found out that this has major problems:

  • BRANCH...

Continue reading...

For the project: "Sandbox utility for FreeBSD" which is developed by the Relkom s.r.o up to this day there was an unfinished task to implement a simple regular expression matching mechanism which should work in the kernel space. It was needed in order to handle the rules with filter-key: regex. Do...

Continue reading...