A comparison of Unix sandboxing techniques [pdf] | Dark Hacker News