Hacker News Reader

While it's true that Android's C library (bionic) uses code from OpenBSD libc.. tame(2) is a system call, in the kernel.

This is a system call requiring significant changes in the kernel. It also hardcodes a lot of weird implementation details into the kernel, like this description of the 'dns' request: "Subsequent to a successful open(2) of /etc/resolv.conf, a few system calls become able to allow DNS network transactions: sendto(2), recvfrom(2), socket(2), connect(2)." That's acceptable when the same people are building the kernel and the userland, like on a BSD, but it wouldn't work on Linux where the userspace is controlled by a bunch of separate parties that like changing implementation details.

Folks at Google are already working on a Linux port of Capsicum. I think its far more likely they would go with that.