For those that haven't come across it before the object-capability model deals with this sort of problem. http://en.wikipedia.org/wiki/Object-capability_model

For those that haven't come across it before the object-capability model deals with this sort of problem. http://en.wikipedia.org/wiki/Object-capability_model http://en.wikipedia.org/wiki/Object-capability_model Edit: That of restricting each process to only be allowed to do certain things.