The 5BSD OS introduces explicit capability-oriented runtime to the Unix family

5BSD is a FreeBSD-based operating system that makes explicit capabilities, rather than broad default privileges, the basis of security. In this model, processes begin without ambient authority and can perform only the actions permitted by capabilities deliberately granted to them. This contrasts with systems that start processes with wide-ranging access and try to constrain them afterward through mechanisms such as namespaces, seccomp, security modules, and control groups. 5BSD aims to make authority delegation and the limits of each workload more visible and predictable.

The system’s privileged initializer, Oracle, creates workloads and supplies only the capabilities needed for their intended roles. Services are located through Serviced, a capability-aware registry; Keyvault and mac_abac provide cryptographic services and attribute-based access control. The design adds capability-focused system calls and kernel services while retaining familiar UNIX interfaces and supporting Linux applications through FreeBSD’s Linux ABI layer. The presentation follows a workload from creation through capability setup and transfer, showing how the kernel enforces delegated authority when software attempts an unauthorized operation. It explains how capability security can be integrated into a BSD-derived system without abandoning existing software, and how explicit permissions can support stronger isolation.