A comparison of Unix sandboxing techniques [pdf] | Hacker News Reader