You want a capability based OS where by default processes are sandboxed.