> I can imagine this being used with some a "tame" command in the shell to run untrusted programs. This might not be useful in practice. The inspiration behin

> I can imagine this being used with some a "tame" command in the shell to run untrusted programs. This might not be useful in practice. The inspiration behind tame() is the observation that a program usually needs many more rights at initialisation-time than in its main-loop. Thus, tame()ing a program before it even starts is unlikely to be practical - if you give it enough permissions to successfully start (including whatever is needed for dynamic linking), you may not have reduced its capabilities much.