Ludovic Courtès writes: > Definitely. Another application I’ve always wanted is a least-authority > shell, like Plash [0]. > > (Speaking of which, I just found Shill [1], which seems similar to Plash > and even has a to-do item regarding package management [2] and is > written in Racket; unfortunately it runs on FreeBSD, for Capsicum.)
As a side note, yesterday I learned about Capsicum for Linux: https://github.com/google/capsicum-linux Unfortunately it has not seen commits this last year. A shame; it would really be nice to get such ocap support in GNU/Linux.