Capsicum: Practical Capabilities for UNIX
Preventing Privilege Escalation