search for: _section_

Many of the security problems we''ve had to deal with recently have been where one program invokes another when no good level of trust exists between them. Currently solutions to this requirement are produced on an ad-hoc basis, usually involving set-id programs (often setuid root), superuser daemons calling user programs for `upcalls'', or both. There are problems with this