Shill: Scripting with Least Privilege
Shill is a scripting language designed to support the Principle of Least Privilege.
Shill has three key security features:
capabilities, which control access to system resources,
contracts, which provide specifications for how scripts use capabilities, and
capability-based sandboxes, which allow scripts to securely invoke executables.
Shill has three main components: a capability-safe scripting language, an "ambient" scripting language for launching capability-safe scripts, and a Mandatory Access Control policy that enforces capability-based sandboxes. Currently, Shill runs on the FreeBSD operating system.
This manual includes instructions for installing Shill and documents the capability-safe and ambient scripting languages.