search for: broarder

...system, but any rougue daemon (hobbled with a wrapper like execcap, but running as root because of a need for a restricted number of capabilities) cannot start replacing system libraries etc. [There is a small book called Secure Unix by Samuel Samalin which goes into this sort of thing. It gives a broarder perspective on what the future of UNIX was going to be -- it seemed to be aimed at introducing the concepts that the now defunct POSIX-security group were laboring over throughout this decade. Its really aimed at manager types, but its certainly worth a browse in the bookshop...] Hope this helps...