Capsicum: Practical Capabilities for UNIX
The Flask Security Architecture: System Support for Diverse Security Policies