Google and the FreeBSD Foundation fund Capsicum development
The FreeBSD Foundation has announced that it and the Google Open Source Programs Office are jointly funding developer Pawel Jakub Dawidek to improve the Capsicum framework.
Capsicum was originally developed by Robert Watson of the University of Cambridge and Ben Laurie from Google Research to extend the POSIX API and provide object-capability security to Unix-like operating systems. The goal of the framework is to give thin-client operating systems like Google's Chrome OS a robust security model that is relatively lightweight. Capsicum has been available in FreeBSD since version 9.0 and Google is working on a Linux version.
You don't need to be a genius to debug a pf.conf firewall ruleset, you just need the guts to run tcpdump