> privsep? Have different processes / tasks do different things using different privileges. Example: parsing HTML does not require access to the file system o

> privsep? Have different processes / tasks do different things using different privileges. Example: parsing HTML does not require access to the file system or graphics APIs. So you could parse HTML in a process that is allowed neither. If someone exploits your HTML parser, they can't do much.